PT-2025-26449 · Risc Zero · Risc0-Zkvm

Christoph Hochrainer · Published 2025-06-20 · Updated 2025-06-21 · CVE-2025-52484

Positive Technologies (AI Summary)

CVSS v4.0

2.7

Low

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions: risc0-zkvm versions 2.0.0 through 2.0.2

Description: The issue is due to a missing constraint in the rv32im circuit, allowing a malicious prover to attack any 3-register RISC-V instruction, including remu and divu, by confusing the RISC-V virtual machine into treating the value of the rs1 register as the same as the rs2 register. This vulnerability was reported via a bug bounty. The fix for the circuit and the update to risc0 have been implemented. Impacted on-chain verifiers have already been disabled.

Recommendations: For risc0-zkvm versions 2.0.0, 2.0.1, and 2.0.2, upgrade to version 2.1.0. For smart contract applications not using the official RISC Zero Verifier Router, update contracts to send verification calls to the 2.1 version of the verifier. No action is required for smart contract applications using the official RISC Zero Verifier Router, as zkVM version 2.1 is active on all official routers and version 2.0 has been disabled.

Exploit

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2025-52484

GHSA-G3QG-6746-3MG9

Affected Products

Risc0-Zkvm

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/52xxx/CVE-2025-52484.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-52484 · Security Note
• https://osv.dev/vulnerability/CVE-2025-52484 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g3qg-6746-3mg9 · Vendor Advisory
• https://github.com/risc0/risc0 · Note
• https://github.com/risc0/risc0/commit/1873bbb8a56793edd1f6195242d184cf6cc5175d · Note
• https://github.com/risc0/risc0/security/advisories/GHSA-g3qg-6746-3mg9 · Note
• https://github.com/risc0/risc0/pull/3181 · Note
• https://github.com/risc0/risc0/commit/006d86c363b16d2b2ac42d32d832a209ff8ab4c9 · Note
• https://github.com/risc0/risc0/commit/67f2d81c638bff5f4fcfe11a084ebb34799b7a89 · Note
• https://github.com/risc0/zirgen/commit/e0e2918302c93e956f73ca2e44aef2b861d8c3ae · Note
• https://github.com/risc0/zirgen/pull/238 · Note
• https://t.me/cvetracker/26683 · Telegram Post
• https://twitter.com/CVEnew/status/1936472546594943061 · Twitter Post