GHSA-hj49-h7fq-px5h · Severity: high · Ecosystem: rust — Soundness issue with Plonky2 look up tables
Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible by 26 = floor(num_routed_wires / 3) always include the 0 -> 0 input-output pair. Thus a malicious prover can always prove that f(0) = 0 for any lookup table f (unless its length happens to be divisible by 26). The cause of problem is that the LookupTableGate-s are padded with zeros. A workaround from the user side is to extend the table (by repeating some entries) so that its length becomes divisible by 26. This vulnerability is fixed in 1.0.1.
Conclusion & alert: CVE-2025-24802 is rated Moderate Risk (41.9/100): CVSS High severity, with low exploitation likelihood (EPSS 0.30%). Mandatory action: Review affected assets and schedule remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.12% | 0.30% | +0.18% |
| 2 | 2026-03-17 | 0.16% | 0.12% | -0.04% |
| 3 | 2026-03-15 | — | 0.16% | — |
Full EPSS history (5 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 8.6 | 3.1 | HIGH |
|
3.9 | 4.0 | [email protected] |
GHSA-hj49-h7fq-px5h · Severity: high · Ecosystem: rust — Soundness issue with Plonky2 look up tables
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| No affected products in dataset. | |||