Executive brief
Unsoundness in variable comparison / non-unique binary decomposition in github.com/consensys/gnark
Affected products
- Go github.com/consensys/gnark
Junglewise Threat Intelligence
CVE-2023-44378: GO-2023-2098 - Unsoundness in variable comparison / non-unique binary decomposition in github.com/consensys/gnark
CVE-2023-44378 · Severity: low · CVSS 3.1 · Published 2023-10-09
Technologies: github.com/consensys/gnark (Go). Vendors: Go.
Related threats
- GO-2025-3929 - Denial of service when computing scalar multiplication using fake-GLV algorithm in github.com/consensys/gnark
- GO-2025-3912 - Gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks in github.com/consensys/gnark
- GO-2024-3122 - Groth16 commitment extension unsound for more than one commitment in github.com/consensys/gnark
- GO-2024-3244 - Gnark out-of-memory during deserialization with crafted inputs in github.com/consensys/gnark
- GO-2024-3123 - Commitments to private witnesses in Groth16 as implemented break zero-knowledge property in github.com/consensys/gnark