CVE-2025-24802

Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible by 26 = floor(num_routed_wires / 3) always include the 0 -> 0 input-output pair. Thus a malicious prover can always prove that f(0) = 0 for any lookup table f (unless its length happens to be divisible by 26). The cause of problem is that the LookupTableGate-s are padded with zeros. A workaround from the user side is to extend the table (by repeating some entries) so that its length becomes divisible by 26. This vulnerability is fixed in 1.0.1.

• CWE-1240

• https://github.com/0xPolygonZero/plonky2/blob/main/plonky2/src/plonk/prover.rs#L97
• https://github.com/0xPolygonZero/plonky2/commit/091047f7f10cae082716f3738ad59a583835f7b6
• https://github.com/0xPolygonZero/plonky2/security/advisories/GHSA-hj49-h7fq-px5h

Published

Jan 30, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-24797Meshtastic is an open source mesh networking solution. A fau…9.8
• CVE-2025-24798Meshtastic is an open source mesh networking solution. From …6.5
• CVE-2025-24799GLPI is a free asset and IT management software package. An …9.8
• CVE-2025-2480Santesoft Sante DICOM Viewer Pro is vulnerable to an out-of-…8.4
• CVE-2025-24800Hyperbridge is a hyper-scalable coprocessor for verifiable, …9.3
• CVE-2025-24801GLPI is a free asset and IT management software package. An …8.8
• CVE-2025-24803Mobile Security Framework (MobSF) is an automated, all-in-on…5.4
• CVE-2025-24804Mobile Security Framework (MobSF) is an automated, all-in-on…4.3
• CVE-2025-24805Mobile Security Framework (MobSF) is an automated, all-in-on…5.5
• CVE-2025-24806Authelia is an open-source authentication and authorization …2.3
• CVE-2025-24807eprosima Fast DDS is a C++ implementation of the DDS (Data D…7.1
• CVE-2025-24808Discourse is an open-source discussion platform. Prior to ve…3.1