CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2024-50354
Medium (5.5) in consensys gnark. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in github.com/consensys/gnark 0.11.1, 0.12.0.
gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal error: runtime: out of memory.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
- CWE
- CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Affected
- consensys:gnark
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cph5-3pgr-c82g | Go | github.com/consensys/gnark | <0.11.1 | 0.11.1 |
| GO-2024-3244 | Go | github.com/consensys/gnark | <0.12.0 | 0.12.0 |