As cited
Copy frozen at (site build).
vulnerabilities
CVE-2020-37268: Rocq/Coq Print Assumptions omits unsafe universe checking inlined through Parameter Inline (0 = 1 demonstrated) — unfixed since 2020
CVE-2020-37268 is a soundness bypass in Rocq (formerly Coq) where the Print Assumptions command omits unsafe universe checking metadata when a parameter is declared inline through module functor application. An attacker can construct a proof of False that appears to have no axioms or unsafe flags. The vulnerability has remained unfixed since its discovery in 2020.
Why it matters: Developers and proof assistants using Rocq or Coq for formal verification should audit their proofs for false proofs of contradiction, as unsoundness could invalidate correctness guarantees of their formal systems.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2020-37268: Rocq/Coq Print Assumptions omits unsafe universe checking inlined through Parameter Inline (0 = 1 demonstrated), unfixed since 2020
CVE-2020-37268 is a soundness bypass in Rocq (formerly Coq) where the Print Assumptions command omits unsafe universe checking metadata when a parameter is declared inline through module functor application. An attacker can construct a proof of False that appears to have no axioms or unsafe flags. The vulnerability has remained unfixed since its discovery in 2020.
Why it matters: Developers and proof assistants using Rocq or Coq for formal verification should audit their proofs for false proofs of contradiction, as unsoundness could invalidate correctness guarantees of their formal systems.
- Source published
- First seen by Cybersecurity Tracker