CVE-2023-44273: Consensys Gnark-Crypto

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does not ensure that the data is in a certain interval.

Affected products

• Consensys Gnark-Crypto: before 0.12.0 (fixed in 0.12.0)

Published 2023-09-28. Last modified 2026-06-17.