{"id":"EUVD-2025-28663","enisaUuid":"107b92b2-d199-34b9-b879-f2fe6e0b86af","description":"gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn\u0027t converge quickly enough for some of the inputs. This issue has been patched in version 0.13.0.","datePublished":"Aug 29, 2025, 9:21:35 PM","dateUpdated":"Sep 2, 2025, 2:09:48 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/Consensys/gnark/security/advisories/GHSA-9fvj-xqr2-xwg8\nhttps://github.com/Consensys/gnark/issues/1483\nhttps://github.com/Consensys/gnark-crypto/commit/56600883e0e9f9b159e9c7000b94e76185ec3d0d\nhttps://github.com/Consensys/gnark/commit/68be6cede36e387ab760725beabd3c96cc94e6dc\n","aliases":"CVE-2025-58157\nGHSA-9fvj-xqr2-xwg8\n","assigner":"GitHub_M","epss":0.54,"enisaIdProduct":[{"id":"d3819a34-fe2a-3b28-846d-f45bd5cff522","product":{"name":"gnark","vendor":{"name":"Consensys"}},"product_version":"\u003d 0.12.0"}],"enisaIdVendor":[{"id":"0edf3e38-5d71-3a2b-94f9-3111569c69a0","vendor":{"name":"Consensys"}}],"enisaIdVulnerability":[{"id":"90c6470e-be1f-3fff-b3a0-400989f3a7f2","vulnerability":{"id":"CVE-2025-58157","description":"gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn\u0027t converge quickly enough for some of the inputs. This issue has been patched in version 0.13.0.","datePublished":"Aug 29, 2025, 9:21:35 PM","dateUpdated":"Sep 2, 2025, 2:09:48 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/Consensys/gnark/security/advisories/GHSA-9fvj-xqr2-xwg8\nhttps://github.com/Consensys/gnark/issues/1483\nhttps://github.com/Consensys/gnark-crypto/commit/56600883e0e9f9b159e9c7000b94e76185ec3d0d\nhttps://github.com/Consensys/gnark/commit/68be6cede36e387ab760725beabd3c96cc94e6dc\n","enisa_id":"EUVD-2025-28663\n","assigner":"GitHub_M","epss":0.54,"dataProcessed":"Nov 2, 2026, 7:15:02 AM","vulnerabilityProduct":[{"id":"df31eecf-f196-35ab-8665-3145afdcb25c","product":{"name":"gnark","vendor":{"name":"Consensys"}},"product_version":"\u003d 0.12.0"},{"id":"e5ef43b9-cb69-435e-93e8-fc0eee76ae8c","product":{"name":"gnark","vendor":{"name":"Consensys"}},"product_version":"\u003d 0.12.0"}],"vulnerabilityVendor":[{"id":"17579ed7-8e51-3ed7-b490-ad47f3d08368","vendor":{"name":"Consensys"}}]}},{"id":"f23c8fd6-9410-3578-83d3-106c80c560e7","vulnerability":{"id":"GHSA-9fvj-xqr2-xwg8","description":"gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm","datePublished":"Aug 29, 2025, 8:20:13 PM","dateUpdated":"Sep 1, 2025, 8:05:35 PM","baseScore":0.0,"references":"https://github.com/Consensys/gnark/security/advisories/GHSA-9fvj-xqr2-xwg8\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-58157\nhttps://github.com/Consensys/gnark/issues/1483\nhttps://github.com/Consensys/gnark-crypto/commit/56600883e0e9f9b159e9c7000b94e76185ec3d0d\nhttps://github.com/Consensys/gnark/commit/68be6cede36e387ab760725beabd3c96cc94e6dc\nhttps://github.com/Consensys/gnark\n","enisa_id":"EUVD-2025-28663\n","aliases":"GHSA-9fvj-xqr2-xwg8\nCVE-2025-58157\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:12:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"8d146001-d227-327f-b079-74442932052e","advisory":{"id":"openSUSE-SU-2025:15564-1","description":"govulncheck-vulndb-0.0.20250917T170349-1.1 on GA media","summary":"govulncheck-vulndb-0.0.20250917T170349-1.1 on GA media","datePublished":"Sep 18, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:42:03 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15564-1.json\nhttps://www.suse.com/security/cve/CVE-2025-4953/\nhttps://www.suse.com/security/cve/CVE-2025-54123/\nhttps://www.suse.com/security/cve/CVE-2025-54376/\nhttps://www.suse.com/security/cve/CVE-2025-58058/\nhttps://www.suse.com/security/cve/CVE-2025-58063/\nhttps://www.suse.com/security/cve/CVE-2025-58157/\nhttps://www.suse.com/security/cve/CVE-2025-58158/\nhttps://www.suse.com/security/cve/CVE-2025-58430/\nhttps://www.suse.com/security/cve/CVE-2025-58437/\nhttps://www.suse.com/security/cve/CVE-2025-58445/\nhttps://www.suse.com/security/cve/CVE-2025-58450/\nhttps://www.suse.com/security/cve/CVE-2025-59358/\nhttps://www.suse.com/security/cve/CVE-2025-59359/\nhttps://www.suse.com/security/cve/CVE-2025-59360/\nhttps://www.suse.com/security/cve/CVE-2025-59361/\nhttps://www.suse.com/security/cve/CVE-2025-7445/\nhttps://www.suse.com/security/cve/CVE-2025-8396/\nhttps://www.suse.com/security/cve/CVE-2025-9072/\nhttps://www.suse.com/security/cve/CVE-2025-9076/\nhttps://www.suse.com/security/cve/CVE-2025-9078/\nhttps://www.suse.com/security/cve/CVE-2025-9084/\n","aliases":"CVE-2025-4953\nCVE-2025-54123\nCVE-2025-54376\nCVE-2025-58058\nCVE-2025-58063\nCVE-2025-58157\nCVE-2025-58158\nCVE-2025-58430\nCVE-2025-58437\nCVE-2025-58445\nCVE-2025-58450\nCVE-2025-59358\nCVE-2025-59359\nCVE-2025-59360\nCVE-2025-59361\nCVE-2025-7445\nCVE-2025-8396\nCVE-2025-9072\nCVE-2025-9076\nCVE-2025-9078\nCVE-2025-9084\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"1cc76f98-371a-3fc6-aee6-5eadf51878a2","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"29107cb4-f129-3481-ac9b-db60712e7317","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"29cdf64b-9d51-3131-8329-d2fe15008bbb","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"2e830e5b-5857-3f97-a80c-b3a30b97b6c2","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"610e85a2-a76d-3b52-ae27-3bf4aba41ec0","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"736c93eb-17d0-3c0d-9744-877b4b8ffc8d","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"ea17cf9d-e8f0-3a74-b23c-845080a781c5","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"fb90779c-62f0-353d-b846-d907b8a69a19","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ff6a651c-8c7a-3ba4-be7f-c1564c968489","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.s390x","vendor":{"name":"SUSE"}}}]}}]}