risc0
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| risc0 | 3 | – | Oct 1, 2025 |
| risc0-ethereum | 1 | – | Jun 24, 2025 |
Exploited and recent CVEs
- CVE-2025-61588 risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read` 0.5%
- CVE-2025-54873 RISC Zero Underconstrained Vulnerability: Division 0.4%
- CVE-2025-52884 risc0-ethereum-contracts allows invalid commitment with digest value of zero to be accepted by Steel.validateCommitment 0.4%
- CVE-2025-52484 RISC Zero zkVM Underconstrained Vulnerability 0.3%