CVE-2023-44378

CVE-2023-44378 affects gnark (Go zk-SNARK library) prior to v0.9.0. For some in-circuit values, there can be two valid bit decompositions: the canonical a and a second decomposition for a+r caused by field overflow. This can enable incorrect comparisons using frontend.API.Cmp/IsLess (e.g., provin...

CVE-2024-50354

Technical details for CVE-2024-50354 are not provided in the connected documents. The available sources only reference the CVE ID in advisory lists. Monitor for an official advisory or patch details to assess impact and remediation.

CVE-2025-57801

CVE-2025-57801 affects gnark before 0.14.0, where Verify in eddsa.go and ecdsa.go did not enforce 0 ≤ S

CVE-2025-58157

The CVE-2025-58157 entry concerns gnark (v0.12.0) with a DoS when computing scalar multiplication using the fake-GLV algorithm, caused by slow convergence for some inputs. The issue has been fixed in v0.13.0. Connected sources (OSV- GO-2025-3929) corroborate a denial-of-service risk in the same f...