CVE-2024-50354 - Gnark Memory Allocation Error

CVE ID : CVE-2024-50354
Published : Oct. 31, 2024, 4:15 p.m. | 24 minutes ago
Description : gnark is a fast zk-SNARK library that offers a high-level API to design circuits. In gnark 0.11.0 and earlier, deserialization of Groth16 verification keys allocate excessive memory, consuming a lot of resources and triggering a crash with the error fatal error: runtime: out of memory.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...