Range checker gadget allows wider inputs than allowed in github.com/consensys/gnark

Description

References

• Consensys/gnark security advisory · ADVISORY
• Consensys/gnark · WEB
• Consensys/gnark commit f528807 · FIX

More vulnerabilities in github.com/consensys/gnark

• CVE-2025-58157HIGH 7.5gnark is a zero-knowledge proof system framework. In version 0.12.0, there is a potential denial of service vulnerability when computing sca…
• CVE-2025-57801CRITICAL 9.1gnark is a zero-knowledge proof system framework. In versions prior to 0.14.0, the Verify function in eddsa.go and ecdsa.go used the S value…
• CVE-2024-50354MEDIUM 5.5gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 ve…
• CVE-2024-45040MEDIUM 5.9gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.11.0, commitments to private witnesses …
• CVE-2024-45039MEDIUM 6.2gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case …