{"id":"GO-2023-2096","summary":"Signature malleability in github.com/consensys/gnark-crypto","details":"Signature malleability in github.com/consensys/gnark-crypto","aliases":["CVE-2023-44273","GHSA-9xfq-8j3r-xp5g","GHSA-fr8m-434r-g3xp","GO-2025-4027"],"modified":"2026-01-22T21:10:55.851626Z","published":"2023-10-05T19:48:40Z","database_specific":{"review_status":"REVIEWED","url":"https://pkg.go.dev/vuln/GO-2023-2096"},"references":[{"type":"FIX","url":"https://github.com/Consensys/gnark-crypto/pull/449"},{"type":"WEB","url":"https://verichains.io"},{"type":"WEB","url":"https://github.com/Consensys/gnark-crypto/releases/tag/v0.12.0"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9xfq-8j3r-xp5g"}],"affected":[{"package":{"name":"github.com/consensys/gnark-crypto","ecosystem":"Go","purl":"pkg:golang/github.com/consensys/gnark-crypto"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.12.0"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/consensys/gnark-crypto/ecc/bls12-377/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-377/twistededwards","symbols":["Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-378/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-378/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-381/bandersnatch/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-381/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-381/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-315/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-315/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-317/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-317/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bn254/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bn254/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-633/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-633/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-756/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-756/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-761/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-761/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/secp256k1/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/stark-curve/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2023-2096.json"}}],"schema_version":"1.7.3"}