Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:32 a.m.10 views

CVE-2024-45039

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case of multiple commitments used inside the circuit the prover is able to choose all but the last commitment. As gnark uses the commitments for optimized...

6.2CVSS6.6AI score0.0019EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/12/19 4:1 a.m.3 views

SUSE CVE-2024-45039

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case of multiple commitments used inside the circuit the prover is able to choose all but the last commitment. As gnark uses the commitments for optimized...

6.2CVSS6.7AI score0.0019EPSS
SaveExploits0References3
OSV
OSV
added 2024/09/06 12:56 p.m.19 views

CVE-2024-45039 gnark's Groth16 commitment extension unsound for more than one commitment

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case of multiple commitments used inside the circuit the prover is able to choose all but the last commitment. As gnark uses the commitments for optimized...

6.2CVSS6.3AI score0.0019EPSS
SaveExploits0References4
Rows per page
Query Builder