← volver
CVE-2024-50354

Out-of-memory during deserialization with crafted inputs

CVSS 5.5 MEDIUMEPSS 0.3%CWE-400
gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal error: runtime: out of memory.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Productos afectados
Consensys · gnark

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →