High severityNVD Advisory· Published Aug 29, 2025· Updated Sep 2, 2025
gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm
CVE-2025-58157
Description
gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn't converge quickly enough for some of the inputs. This issue has been patched in version 0.13.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/consensys/gnarkGo | >= 0.12.0, < 0.13.0 | 0.13.0 |
Affected products
5- ghsa-coords4 versionspkg:golang/github.com/consensys/gnarkpkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweedpkg:rpm/suse/govulncheck-vulndb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6
>= 0.12.0, < 0.13.0+ 3 more
- (no CPE)range: >= 0.12.0, < 0.13.0
- (no CPE)range: < 0.0.20250918T182144-150000.1.107.1
- (no CPE)range: < 0.0.20250917T170349-1.1
- (no CPE)range: < 0.0.20250918T182144-150000.1.107.1
- Consensys/gnarkv5Range: = 0.12.0
Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-9fvj-xqr2-xwg8ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-58157ghsaADVISORY
- github.com/Consensys/gnark-crypto/commit/56600883e0e9f9b159e9c7000b94e76185ec3d0dghsax_refsource_MISCWEB
- github.com/Consensys/gnark/commit/68be6cede36e387ab760725beabd3c96cc94e6dcghsax_refsource_MISCWEB
- github.com/Consensys/gnark/issues/1483ghsax_refsource_MISCWEB
- github.com/Consensys/gnark/security/advisories/GHSA-9fvj-xqr2-xwg8ghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.