Vulnerabilities in Consensys
6 resultsCVE-2025-58157HIGHgnark affected by denial of service when computing scalar multiplication using fake-GLV algorithmEPSS 0.5%CVE-2024-45040MEDIUMgnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge propertyEPSS 0.4%CVE-2024-50354MEDIUMOut-of-memory during deserialization with crafted inputsEPSS 0.3%CVE-2023-44378HIGHgnark vulnerable to unsoundness in variable comparison/non-unique binary decompositionEPSS 0.2%CVE-2025-57801HIGHgnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checksEPSS 0.2%CVE-2024-45039MEDIUMgnark's Groth16 commitment extension unsound for more than one commitmentEPSS 0.2%