CVE-2026-62337

The SNARK Verifier generic verifier is vulnerable to a flaw in the Halo 2 aggregation circuit prior to version 0.2.5 . The root cause is that EcPointLoader::multi_scalar_multiplication passes a base paired with Value::Constant(ONE) to sum_with_const, which delegates to halo2-lib's EccChip::sum. B...

CVE-2026-62337: axiom-crypto snark-verifier: SNARK Verifier is a generic (S)NARK verifier

SNARK Verifier is a generic SNARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encoded as the point at infinity. EcPointLoader::multiscalarmultiplication places a Value::Assigned base paired with Value::ConstantONE into its unscaled variable-base list and...