Lucene search

CVE-2024-32644

🗓️ 19 Apr 2024 15:50:15Reported by [email protected]Type

Evmos blockchain pre-17.0.0 allows arbitrary token minting via out-of-sync states, affecting Cosmos SDK and EVM interoperability

Reporter	Title	Published	Views	Family All 8
Github Security Blog	Evmos transaction execution not accounting for all state transition after interaction with precompiles	10 Apr 202422:04	–	github
Vulnrichment	CVE-2024-32644 Evmos' transaction execution not accounting for all state transition after interaction with precompiles	19 Apr 202414:53	–	vulnrichment
OSV	Evmos transaction execution not accounting for all state transition after interaction with precompiles in github.com/evmos/evmos	5 Jun 202415:10	–	osv
OSV	Evmos transaction execution not accounting for all state transition after interaction with precompiles	10 Apr 202422:04	–	osv
OSV	CVE-2024-32644	19 Apr 202415:15	–	osv
Veracode	Improper Synchronisation	22 Apr 202406:14	–	veracode
CVE	CVE-2024-32644	19 Apr 202415:15	–	cve
Cvelist	CVE-2024-32644 Evmos' transaction execution not accounting for all state transition after interaction with precompiles	19 Apr 202414:53	–	cvelist

Source	Link
github	www.github.com/evmos/evmos/commit/08982b5ee726b97bc50eaf58d1914829648b6a5f
github	www.github.com/evmos/evmos/blob/b196a522ba4951890b40992e9f97aa610f8b5f9c/x/evm/statedb/statedb.go
github	www.github.com/evmos/evmos/security/advisories/GHSA-3fp5-2xwh-fxm6

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Apr 2024 15:15Current

9.2High risk

Vulners AI Score9.2

CVSS39.1

EPSS0.0004

CWE-662