{"schema_version":"1.3.1","id":"GO-2025-4087","modified":"2025-11-05T18:41:07Z","published":"2025-11-05T18:41:07Z","aliases":["GHSA-fj2x-735w-74vq"],"summary":"Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto","details":"Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto","affected":[{"package":{"name":"github.com/consensys/gnark-crypto","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.9.1"},{"fixed":"0.18.1"},{"introduced":"0.19.0"},{"fixed":"0.19.2"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/consensys/gnark-crypto/ecc/secp256k1/fr","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-633/fp","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-377/fp","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-381/fp","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/grumpkin/fp","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-633/fr","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-377/fr","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-315/fr","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/field/babybear","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/stark-curve/fr","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/grumpkin/fr","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bn254/fp","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-317/fr","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/field/goldilocks","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bn254/fr","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-381/fr","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/secp256k1/fp","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/field/koalabear","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-315/fp","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/stark-curve/fp","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-761/fp","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-317/fp","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-761/fr","symbols":["Vector.AsyncReadFrom","Vector.ReadFrom","Vector.UnmarshalBinary"]}]}}],"references":[{"type":"ADVISORY","url":"https://github.com/Consensys/gnark-crypto/security/advisories/GHSA-fj2x-735w-74vq"},{"type":"WEB","url":"https://github.com/Consensys/gnark-crypto/commit/2e7bf9190a0aac896eeec3876c87c77a35661be7"},{"type":"WEB","url":"https://github.com/Consensys/gnark-crypto/pull/759"},{"type":"FIX","url":"https://github.com/Consensys/gnark-crypto/commit/2e7bf9190a0aac896eeec3876c87c77a35661be7"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2025-4087","review_status":"REVIEWED"}}