CVE-2025-58157 json
gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm
published 2025-08-29 14 mo ago modified 2026-10-18 21 d ago also EUVD-2025-28663 , GHSA-9fvj-xqr2-xwg8 , GO-2025-3929
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 45%
- public exploits
- 0
- none known
Summary
gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing scalar multiplication is using the fake-GLV algorithm. This is because the algorithm didn't converge quickly enough for some of the inputs. This issue has been patched in version 0.13.0.
Patch / fix
- go github.com/consensys/gnark 0.13.0
- consensys gnark 0.13.0
- govulncheck-vulndb SLE Module for Package Hub 15 SP6, openSUSE Leap 15.6 0.0.20250918T182144-150000.1.107.1
suse advisories SUSE-SU-2025:03289-1
- govulncheck-vulndb openSUSE Leap 16.0 0.0.20260723T184607-160000.1.1
- govulncheck-vulndb openSUSE Tumbleweed 0.0.20250917T170349-1.1
opensuse advisories openSUSE-SU-2026:21483-1openSUSE-SU-2025:15564-1
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 14 mo ago
Exploit prediction
0.54% chance of exploitation in the next 30 days, higher than 45% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- github.com https://github.com/Consensys/gnark/issues/1483 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| GitHub | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| go | github.com/consensys/gnark | >=0.12.0, <0.13.0 <0.13.0 |
0.13.0 |
Affected products
- Consensys gnark
Classification
- Weakness
-
- CWE-400 Uncontrolled Resource Consumption
References
-
github.com
/Consensys/gnark-crypto/commit/56600883e0e9f9b159e9c7000b94e76185ec3d0d
web, patch
-
github.com
/Consensys/gnark/commit/68be6cede36e387ab760725beabd3c96cc94e6dc
web, patch
-
github.com
/Consensys/gnark/issues/1483
web, exploit, issue-tracking
-
github.com
/Consensys/gnark/security/advisories/GHSA-9fvj-xqr2-xwg8
web, vendor-advisory, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2025-58157
advisory
-
github.com
/Consensys/gnark
package
Sources
- CVE List CVE-2025-58157
- GitHub Advisory GHSA-9fvj-xqr2-xwg8
- NVD CVE-2025-58157
- OSV GO-2025-3929
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.