Matter Labs develops compiler and tooling products for zero-knowledge virtual machines, with a focused vulnerability footprint centered on its ZK-specific compilation tools ZKVyper and ZKSolc. Current vulnerability counts, severity distribution, and exploitation activity are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Matter Labs over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-43366CRITICAL zkvyper is a Vyper compiler. Starting in version 1.3.12 and prior to version 1.5.3, since LLL IR has no Turing-incompletness restrictions, it is compiled to a loop with a much more | Aug 15, 2024 | 9.1 | 24 | NO | NO |
CVE-2024-45056MEDIUM zksolc is a Solidity compiler for ZKsync. All LLVM versions since 2015 fold `(xor (shl 1, x), -1)` to `(rotl ~1, x)` if run with optimizations enabled. Here `~1` is generated as an | Aug 29, 2024 | 5.9 | 18 | NO | NO |
CVE-2023-46232MEDIUM era-compiler-vyper is the EraVM Vyper compiler for zkSync Era, a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. Prior to era-compiler-vype version 1.3.10, a bug | Oct 25, 2023 | 5.3 | 18 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Matter Labs.
Media articles that mention a CVE ID that affects a product developed by Matter Labs — matched by CVE ID, not by vendor name.