CVE-2025-58157

gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn't converge quickly enough for some of the inputs. This issue has been patched in version 0.13.0.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/Consensys/gnark-crypto/commit/56600883e0e9f9b159e9c7000b94e76185ec3d0d	Patch
https://github.com/Consensys/gnark/commit/68be6cede36e387ab760725beabd3c96cc94e6dc	Patch
https://github.com/Consensys/gnark/issues/1483	Exploit Issue Tracking
https://github.com/Consensys/gnark/security/advisories/GHSA-9fvj-xqr2-xwg8	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:consensys:gnark:0.12.0:*:*:*:*:*:*:*

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) gnark es un framework de sistema de prueba de conocimiento cero. En la versión 0.12.0, existe una potencial vulnerabilidad de denegación de servicio cuando la computación de la multiplicación escalar utiliza el algoritmo fake-GLV. Esto se debe a que el algoritmo no convergía lo suficientemente rápido para algunas de las entradas. Este problema ha sido parcheado en la versión 0.13.0.

Information

Published : 2025-08-29 22:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-58157

Mitre link : CVE-2025-58157

CVE.ORG link : CVE-2025-58157

JSON object : View

Products Affected

consensys

gnark

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2025-58157", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-58157", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-02T14:09:34.494455Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "Consensys", "product": "gnark", "versions": [{"status": "affected", "version": "= 0.12.0"}]}]}], "published": "2025-08-29T22:15:32.700", "references": [{"url": "https://github.com/Consensys/gnark-crypto/commit/56600883e0e9f9b159e9c7000b94e76185ec3d0d", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/Consensys/gnark/commit/68be6cede36e387ab760725beabd3c96cc94e6dc", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/Consensys/gnark/issues/1483", "tags": ["Exploit", "Issue Tracking"], "source": "security-advisories@github.com"}, {"url": "https://github.com/Consensys/gnark/security/advisories/GHSA-9fvj-xqr2-xwg8", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn't converge quickly enough for some of the inputs. This issue has been patched in version 0.13.0."}, {"lang": "es", "value": "gnark es un framework de sistema de prueba de conocimiento cero. En la versi\u00f3n 0.12.0, existe una potencial vulnerabilidad de denegaci\u00f3n de servicio cuando la computaci\u00f3n de la multiplicaci\u00f3n escalar utiliza el algoritmo fake-GLV. Esto se debe a que el algoritmo no converg\u00eda lo suficientemente r\u00e1pido para algunas de las entradas. Este problema ha sido parcheado en la versi\u00f3n 0.13.0."}], "lastModified": "2026-10-18T21:10:00.120", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:consensys:gnark:0.12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BED009EB-B460-444C-8585-8D66B7074444"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}