plonky2 vulnerabilities

1 known vulnerability in plonky2 from 0xPolygonZero. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  plonky2: Use of a Cryptographic Primitive with a Risky Implementation

  CVE-2025-24802Jan 30, 20250xPolygonZero

  Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible by 26 = floor(num_routed_wires / 3) always include the 0 -> 0 input-output pair. Thus a malicious prover can always prove that f(0) = 0 for a