Consensys records

8 published records for vendor consensys.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-44273No exploit	Consensys gnark-crypto through 0.11.2 allows Signature Malleability.consensys · gnark-crypto · CWE-502 Pre-auth Deserialization	Critical9.8	—	1.0%	Sep 28, 2023
34Monitor	CVE-2025-57801No exploit	gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checksconsensys · gnark · CWE-347 Weak crypto	High8.6	—	0.2%	Aug 22, 2025
30Monitor	CVE-2025-58157No exploit	gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithmconsensys · gnark · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Aug 29, 2025
24Monitor	CVE-2024-45039No exploit	gnark's Groth16 commitment extension unsound for more than one commitmentconsensys · gnark-crypto · CWE-200 Info leak	Medium6.2	—	0.1%	Sep 6, 2024
23Monitor	CVE-2024-45040No exploit	gnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge propertyconsensys · gnark-crypto · CWE-200 Pre-auth Info leak	Medium5.9	—	0.4%	Sep 6, 2024
22Monitor	CVE-2024-50354No exploit	Out-of-memory during deserialization with crafted inputsconsensys · gnark · CWE-400 Deserialization Denial of service	Medium5.5	—	0.3%	Oct 31, 2024
22Monitor	CVE-2023-44378No exploit	gnark vulnerable to unsoundness in variable comparison/non-unique binary decompositionconsensys · gnark · CWE-191 Memory safety	Medium5.5	—	0.2%	Oct 9, 2023
21Monitor	CVE-2024-23688No exploit	Consensys Discovery Nonce Reuseconsensys · discovery · CWE-323 Pre-auth	Medium5.3	—	0.4%	Jan 19, 2024

CVE-2023-44273
39Monitor
Consensys gnark-crypto through 0.11.2 allows Signature Malleability.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Deserialization
consensys · gnark-cryptoSep 28, 2023
CVE-2025-57801
34Monitor
gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks
HighCVSS 8.6No exploitEPSS 0%
- Weak crypto
consensys · gnarkAug 22, 2025
CVE-2025-58157
30Monitor
gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
consensys · gnarkAug 29, 2025
CVE-2024-45039
24Monitor
gnark's Groth16 commitment extension unsound for more than one commitment
MediumCVSS 6.2No exploitEPSS 0%
- Info leak
consensys · gnark-cryptoSep 6, 2024
CVE-2024-45040
23Monitor
gnark's commitments to private witnesses in Groth16 as implemented break zero-knowledge property
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
- Info leak
consensys · gnark-cryptoSep 6, 2024
CVE-2024-50354
22Monitor
Out-of-memory during deserialization with crafted inputs
MediumCVSS 5.5No exploitEPSS 0%
- Deserialization
- Denial of service
consensys · gnarkOct 31, 2024
CVE-2023-44378
22Monitor
gnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
consensys · gnarkOct 9, 2023
CVE-2024-23688
21Monitor
Consensys Discovery Nonce Reuse
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
consensys · discoveryJan 19, 2024