CVE-2024-50354
Out-of-memory during deserialization with crafted inputs
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Out-of-memory during deserialization with crafted inputs
gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal error: runtime: out of memory.
Reserved 2024-10-22 | Published 2024-10-31 | Updated 2024-10-31 | Assigner GitHub_MCWE-400: Uncontrolled Resource Consumption
github.com/.../gnark/security/advisories/GHSA-cph5-3pgr-c82g
github.com/Consensys/gnark/pull/1307
github.com/...ommit/47ae846339add2bdf9983e499342bfdfe195191d
Support options
