Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/03/13 8:02 p.m.•27 views

rs-soroban-sdk: `Fr` scalar field equality comparison bypasses modular reduction

Security Advisory: Incorrect Equality for Fr Scalar Field Types BN254, BLS12-381 Summary Missing modular reduction in Fr causes incorrect equality comparisons for BN254 and BLS12-381 types in soroban-sdk. Impact The Fr scalar field types for BN254 and BLS12-381 in soroban-sdk compared values usin...

5.3CVSS6.3AI score0.00307EPSS
SaveExploits0References8Affected Software1
osv_ghsa
osv_ghsa
•added 2026/03/13 8:02 p.m.•36 views

GHSA-X2HW-PX52-WP4M rs-soroban-sdk: `Fr` scalar field equality comparison bypasses modular reduction

Security Advisory: Incorrect Equality for Fr Scalar Field Types BN254, BLS12-381 Summary Missing modular reduction in Fr causes incorrect equality comparisons for BN254 and BLS12-381 types in soroban-sdk. Impact The Fr scalar field types for BN254 and BLS12-381 in soroban-sdk compared values usin...

5.3CVSS6.3AI score0.00307EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/03/12 9:39 p.m.•15 views

CVE-2026-32322

soroban-sdk is a Rust SDK for Soroban contracts. Prior to 22.0.11, 23.5.3, and 25.3.0, The Fr scalar field types for BN254 and BLS12-381 in soroban-sdk compared values using their raw U256 representation without first reducing modulo the field modulus r. This caused mathematically equal field...

5.3CVSS6.2AI score0.00307EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder