PT-2025-26784 · Risc Zero+1 · Risc Zero+1

Daniel526 · Published 2025-06-24 · Updated 2025-06-25 · CVE-2025-52884

Positive Technologies (AI Summary)

CVSS v4.0

1.7

Low

Base vector

AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions: RISC Zero versions prior to 2.1.1 and 2.2.0

Description: The issue concerns the Steel.validateCommitment Solidity library function, which returns true for a crafted commitment with a digest value of zero. This violates the function's semantics, as it does not correspond to any block in the current chain. The commitment will never be produced by a correct zkVM guest using Steel. Leveraging this bug to compromise the soundness of a program using Steel would require a separate bug or misuse of the Steel library. The estimated number of potentially affected devices worldwide is not available.

Recommendations: For versions prior to 2.1.1 and 2.2.0, update to version 2.1.1 or 2.2.0 to resolve the issue. For users of the Steel Solidity library versions 2.1.0 or earlier, ensure that Steel.validateCommitment is used in tandem with zkVM proof verification of a Steel program. Users not verifying a zkVM proof of a Steel program should update their application to do so, as this is the correct usage of Steel.

Exploit

Fix

Weakness Enumeration

CWE-159

Related Identifiers

CVE-2025-52884

GHSA-GJV3-89HH-9XQ2

Affected Products

Risc Zero

Steel

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/52xxx/CVE-2025-52884.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-52884 · Security Note
• https://osv.dev/vulnerability/GHSA-gjv3-89hh-9xq2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-52884 · Vendor Advisory
• https://github.com/risc0/risc0-ethereum · Note
• https://github.com/risc0/risc0-ethereum/commit/3bbac859c7132b21ba5fdf2d47f1dd52e7e73d98 · Note
• https://github.com/risc0/risc0-ethereum/pull/605 · Note
• https://github.com/risc0/risc0-ethereum/releases/tag/v2.1.1 · Note
• https://github.com/risc0/risc0-ethereum/releases/tag/v2.2.0 · Note
• https://github.com/risc0/risc0-ethereum/security/advisories/GHSA-gjv3-89hh-9xq2 · Note
• https://github.com/risc0/risc0-ethereum/blob/ff0cb9253a87945b653b825711b8b5075f8b7545/examples/erc20-counter/contracts/src/Counter.sol#L56-L63 · Note
• https://twitter.com/VulmonFeeds/status/1937672942231462380 · Twitter Post
• https://t.me/cvenotify/126598 · Telegram Post
• https://t.me/cvetracker/26987 · Telegram Post
• https://twitter.com/CVEnew/status/1937612306793275846 · Twitter Post