Integer overflow in Consensys Gnark
CVE-2023-44378
gnark is a zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.9.0, for some in-circuit values, it is possible to construct two valid decomposition to bits. In addition to the canonical decomposition of `a`, for small values there exists a second decomposition for `a+r` (where `r` is the modulus the values are being reduced by). The second decomposition was possible due to overflowing the field where the values are defined. Upgrading to version 0.9.0 should fix the issue without needing to change the calls to value comparison methods.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.002 (11.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 12th percentile — 11.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Consensys Gnark — versions < 0.9.0
Weakness classification (CWE)
References
- github.com/Consensys/gnark/security/advisories/GHSA-498w-5j49-vqjg (Patch, Third Party Advisory, Mitigation)
- github.com/zkopru-network/zkopru/issues/116 (Not Applicable)
- github.com/Consensys/gnark/commit/59a4087261a6c73f13e80d695c17b398c3d0934f (Patch)
Frequently asked questions
- What is CVE-2023-44378?
- CVE-2023-44378 is a high-severity vulnerability in Consensys Gnark, classified under Integer Underflow. CVSS score: 7.1/10. Published 2023-10-09.
- How severe is CVE-2023-44378?
- High severity. CVSS v3 base score is 7.1 out of 10.