Executive brief
Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto
Affected products
- Go github.com/Consensys/gnark-crypto
Junglewise Threat Intelligence
GO-2025-4087 - Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto
Severity: info ยท Published 2025-11-05
Technologies: github.com/Consensys/gnark-crypto (Go). Vendors: Go.
Related threats
- GO-2025-4027 - Gnark-crypto doesn't range check input values during ECDSA and EdDSA deserialization in github.com/consensys/gnark-crypto
- GO-2023-2101 - Incorrect exponentiation results in github.com/consensys/gnark-crypto
- gnark-crypto's exponentiation in the pairing target group GT using GLV can give incorrect results