Integer Division Vulnerability in RISC Zero Computing Platform
CVE-2025-54873

2.7LOW

Key Information:

Vendor

Risc0

Status
Risc0
Vendor
CVE Published:
6 August 2025

What is CVE-2025-54873?

The RISC Zero computing platform, leveraging zk-STARKs and built on the RISC-V microarchitecture, has a vulnerability in its risc0-zkvm and circuit packages. This issue arises from an improper handling of signed integer division, which can produce multiple valid outputs for certain inputs, while division by zero situations lead to underconstrained results. These flaws are present in versions 2.0.0 through 2.1.0 of the risc0-zkvm and versions 2.0.0 to 2.0.4 of both the risc0-circuit-rv32im and risc0-circuit-rv32im-sys packages, prompting a need for immediate attention and upgrade to the patched versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

risc0 >= 2.0.0, < 2.2.0

References

https://github.com/risc0/risc0/security/advisories/GHSA-f...
x_refsource_CONFIRM
https://github.com/risc0/risc0/pull/3235
x_refsource_MISC
https://github.com/risc0/zirgen/pull/249
x_refsource_MISC

CVSS V4

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

JSON
.