A critical vulnerability in the gnark-crypto library's Vector.ReadFrom() function allows an attacker to cause unchecked memory allocation by providing a maliciously crafted input. This leads to an out-of-memory crash and denial of service due to allocation attempts of up to approximately 128 GB of memory. The root cause is the lack of validation on a 4-byte length field read from untrusted input during vector deserialization. The issue is patched in versions 0.18.1 and 0.19.2 of gnark-crypto.