CVE-2021-38194 | BDVDB-2026-158339 Detail

Description#

An issue was discovered in the ark-r1cs-std crate before 0.3.1 for Rust. It does not enforce any constraints in the FieldVar::mul_by_inverse method. Thus, a prover can produce a proof that is unsound but is nonetheless verified.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://rustsec.org/advisories/RUSTSEC-2021-0075.html
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ark-r1cs-std/RUSTSEC-2021-0075.md

Exploit#

No public exploit known

History#

Version 12021-08-08Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.