Lucene search

K
osvGoogleOSV:CVE-2021-25836
HistoryFeb 08, 2021 - 6:15 p.m.

CVE-2021-25836

2021-02-0818:15:13
Google
osv.dev
4

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.2%

Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memory(stateObject.code) and is further written to persistent store at the Endblock stage, which may be utilized to build honeypot contracts.

CPENameOperatorVersion
etherminteq0.4.0
etherminteq0.0.0
etherminteq0.3.0

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.2%

Related for OSV:CVE-2021-25836