Read the docs
TI-2023-23885 Aliases CVE-2023-44378GHSA-498w-5j49-vqjg

gnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition

Priority LOW 31CWE-191Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

gnark is a zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.9.0, for some in-circuit values, it is possible to construct two valid decomposition to bits. In addition to the canonical decomposition of `a`, for small values there exists a second decomposition for `a+r` (where `r` is the modulus the values are being reduced by). The second decomposition was possible due to overflowing the field where the values are defined. Upgrading to version 0.9.0 should fix the issue without needing to change the calls to value comparison methods.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00234 14th percentileScored 2026-11-07
Fix Fixed gnark (Consensys): 0.9.0github.com/consensys/gnark (Go): 0.9.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Consensysgnarkbefore 0.9.00.9.0Patch availableCNA
—github.com/consensys/gnark (Go)before 0.9.00.9.0Patch availableGHSA-498w-5j49-vqjg
  • gnark VendorConsensys Affected before 0.9.0 Fixed in 0.9.0 Patch available CNA
  • github.com/consensys/gnark (Go) Vendor— Affected before 0.9.0 Fixed in 0.9.0 Patch available GHSA-498w-5j49-vqjg

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:consensys:gnark:*:*:*:*:*:*:*:*before 0.9.0VulnerableConsensys
  • cpe:2.3:a:consensys:gnark:*:*:*:*:*:*:*:* Versions before 0.9.0 Vulnerable ·Consensys

Remediation

  • Fix · CNA gnark (Consensys) Fixed in 0.9.0
  • Fix · GHSA-498w-5j49-vqjg github.com/consensys/gnark (Go) Fixed in 0.9.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-44378
  2. 2026-10-03 Alias added: GHSA-498w-5j49-vqjg

References

Patch 2

Advisory 2

Other 3

  • TI-2025-35973 gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm CVSS 3.1HIGH 7.5
  • TI-2025-35684 gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks CVSS 4.0HIGH 8.6
  • TI-2024-33789 Out-of-memory during deserialization with crafted inputs CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences