Matter-Labs
6 CVEs across 4 Matter-Labs products. Browse Matter-Labs vulnerabilities, severities, and proof-of-concept exploits.
Matter-Labs products with known CVEs
Matter-Labs CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-45056 | Medium | 5.9 | 2024-08-29 | zksolc is a Solidity compiler for ZKsync. All LLVM versions since 2015 fold `(xor (shl 1, x), -1)` to `(rotl ~1, x)` if run with optimizations enabled. Here `~… |
CVE-2024-43366 | High | 7.5 | 2024-08-15 | zkvyper is a Vyper compiler. Starting in version 1.3.12 and prior to version 1.5.3, since LLL IR has no Turing-incompletness restrictions, it is compiled to a… |
CVE-2024-38533 | Medium | 6.5 | 2024-06-28 | ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access th… |
CVE-2024-35229 | Medium | 5.3 | 2024-05-27 | ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. Prior to version 1.3.10, there is a very specific pattern `f(a(),b()); check_… |
CVE-2024-34704 | Medium | 5.9 | 2024-05-14 | era-compiler-solidity is the ZKsync compiler for Solidity. The problem occurred during instruction selection in the `DAGCombine` phase while visiting the XOR… |
CVE-2023-46232 | Medium | 5.3 | 2023-10-25 | era-compiler-vyper is the EraVM Vyper compiler for zkSync Era, a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. Prior to era-compiler-vype v… |