crates.io/risc0-zkos-v1compat CVE-2025-61588: critical 9.3, EPSS 0.46%
risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`
Action: Upgrade risc0-zkos-v1compat to 2.1.0 or later.
cargo update -p risc0-zkos-v1compat --precise 2.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.0 | - |
Fixed versions
| 2.1.0 |
Sources
- osv: GHSA-jqq4-c7wq-36h7#crates.io/risc0-zkos-v1compat
- nvd: CVE-2025-61588
- https://github.com/risc0/risc0/security/advisories/GHSA-jqq4-c7wq-36h7
- https://github.com/risc0/risc0/pull/3351
- https://github.com/risc0/risc0/commit/3f00e1fa0159599c1601e788021f2169d1f0a4dc
- https://github.com/risc0/risc0
CVE-2025-61588 · published · modified · JSON