Product:

Zksolc

(Matter\-Labs)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 1
Date Id Summary Products Score Patch Annotated
2024-08-29 CVE-2024-45056 zksolc is a Solidity compiler for ZKsync. All LLVM versions since 2015 fold `(xor (shl 1, x), -1)` to `(rotl ~1, x)` if run with optimizations enabled. Here `~1` is generated as an unsigned 64 bits number (`2^64-1`). This number is zero-extended to 256 bits on EraVM target while it should have been sign-extended. Thus instead of producing `roti 2^256 - 1, x` the compiler produces `rotl 2^64 - 1, x`. Analysis has shown that no contracts were affected by the date of publishing this advisory.... Zksolc 5.9