CVE-2023-44273 | BDVDB-2026-212868 Detail

Description#

Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does not ensure that the data is in a certain interval.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://verichains.io
https://github.com/Consensys/gnark-crypto/releases
https://github.com/Consensys/gnark-crypto/pull/449

Exploit#

No public exploit known

History#

Version 12023-09-28Record published in the CVE List.
Version 22024-09-23Most recent update recorded in the CVE List.