CVE-2023-44378 gnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition

gnark is a zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.9.0, for some in-circuit values, it is possible to construct two valid decomposition to bits. In addition to the canonical decomposition of a, for small values there exists a second decomposition for a...

Insecure Variable Comparison

Caucho Quercus uses an insecure variable comparison. When using the == operator for comparison of variables of various types, there is a possibility of variable comparisons to always result in a TRUE state...