GO-2025-4087

See a problem?
Please try reporting it to the source first.
Source
https://pkg.go.dev/vuln/GO-2025-4087
Import Source
https://vuln.go.dev/ID/GO-2025-4087.json
JSON Data
https://api.osv.dev/v1/vulns/GO-2025-4087
Aliases
Downstream
Related
Published
2025-11-05T18:41:07Z
Modified
2026-02-04T03:47:39Z
Summary
Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto
Details

Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto

Database specific 
{
    "review_status": "REVIEWED",
    "url": "https://pkg.go.dev/vuln/GO-2025-4087"
}
References

Affected packages

Go / github.com/consensys/gnark-crypto

Package

Name
github.com/consensys/gnark-crypto
View open source insights on deps.dev
Purl
pkg:golang/github.com/consensys/gnark-crypto

Affected ranges

Type
SEMVER
Events
Introduced
0.9.1
Fixed
0.18.1
Introduced
0.19.0
Fixed
0.19.2

Ecosystem specific 

{
    "imports": [
        {
            "path": "github.com/consensys/gnark-crypto/ecc/secp256k1/fr",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bw6-633/fp",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bls12-377/fp",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bls12-381/fp",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/grumpkin/fp",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bw6-633/fr",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bls12-377/fr",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bls24-315/fr",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/field/babybear",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/stark-curve/fr",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/grumpkin/fr",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bn254/fp",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bls24-317/fr",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/field/goldilocks",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bn254/fr",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bls12-381/fr",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/secp256k1/fp",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/field/koalabear",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bls24-315/fp",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/stark-curve/fp",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bw6-761/fp",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bls24-317/fp",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        },
        {
            "path": "github.com/consensys/gnark-crypto/ecc/bw6-761/fr",
            "symbols": [
                "Vector.AsyncReadFrom",
                "Vector.ReadFrom",
                "Vector.UnmarshalBinary"
            ]
        }
    ]
}

Database specific

source 
"https://vuln.go.dev/ID/GO-2025-4087.json"