CVE-2025-52484
2 advisories.
crates.io/risc0-zkvm CVE-2025-52484: low, EPSS 0.27%
zkVM Underconstrained Vulnerability
Action: Upgrade risc0-zkvm to 2.1.0 or later.
cargo update -p risc0-zkvm --precise 2.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.1.0 | - |
Fixed versions
| 2.1.0 |
Sources
- osv: GHSA-g3qg-6746-3mg9
- https://github.com/risc0/risc0/security/advisories/GHSA-g3qg-6746-3mg9
- https://nvd.nist.gov/vuln/detail/CVE-2025-52484
- https://github.com/risc0/risc0/pull/3181
- https://github.com/risc0/zirgen/pull/238
- https://github.com/risc0/risc0/commit/006d86c363b16d2b2ac42d32d832a209ff8ab4c9
- https://github.com/risc0/risc0/commit/1873bbb8a56793edd1f6195242d184cf6cc5175d
- https://github.com/risc0/risc0/commit/67f2d81c638bff5f4fcfe11a084ebb34799b7a89
- https://github.com/risc0/zirgen/commit/e0e2918302c93e956f73ca2e44aef2b861d8c3ae
- https://github.com/risc0/risc0
CVE-2025-52484 · published · modified · JSON
crates.io/risc0-circuit-rv32im CVE-2025-52484: low, EPSS 0.27%
zkVM Underconstrained Vulnerability
Action: Upgrade risc0-circuit-rv32im to 2.0.4 or later.
cargo update -p risc0-circuit-rv32im --precise 2.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.4 | - |
Fixed versions
| 2.0.4 |
Sources
- osv: GHSA-g3qg-6746-3mg9#crates.io/risc0-circuit-rv32im
- https://github.com/risc0/risc0/security/advisories/GHSA-g3qg-6746-3mg9
- https://nvd.nist.gov/vuln/detail/CVE-2025-52484
- https://github.com/risc0/risc0/pull/3181
- https://github.com/risc0/zirgen/pull/238
- https://github.com/risc0/risc0/commit/006d86c363b16d2b2ac42d32d832a209ff8ab4c9
- https://github.com/risc0/risc0/commit/1873bbb8a56793edd1f6195242d184cf6cc5175d
- https://github.com/risc0/risc0/commit/67f2d81c638bff5f4fcfe11a084ebb34799b7a89
- https://github.com/risc0/zirgen/commit/e0e2918302c93e956f73ca2e44aef2b861d8c3ae
- https://github.com/risc0/risc0
CVE-2025-52484 · published · modified · JSON