PT-2023-29214 · Gnark · Gnark
Kustosz
·
Publicado
2023-10-04
·
Atualizado
2023-10-13
·
CVE-2023-44378
CVSS v3.1
7.1
Alta
| Vetor | AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
gnark versions prior to 0.9.0
Description
The issue concerns the construction of two valid decompositions to bits for some in-circuit values, due to overflowing the field where the values are defined. This allows a malicious prover to construct a valid proof for a statement
a < b even if a > b. The problem impacts users using API.Cmp or API.IsLess methods, as well as those using bits.ToBinary or API.ToBinary methods with full-width decomposition.Recommendations
Upgrading to version 0.9.0 should fix the issue without needing to change the calls to value comparison methods.
Alternatively, users can use the
std/math/cmp gadget, which allows bounding the number of bits being compared, making comparisons more efficient if the bound on the absolute difference of the values is known.Exploit
Correção
Integer Underflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Gnark