Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-878M-3G6Q-594Q
HistoryMar 03, 2023 - 8:02 p.m.

OpenZeppelin Contracts contains Incorrect Calculation

2023-03-0320:02:16
Google
osv.dev
14
incorrect calculation
nfts
batches
update
balances
transfers
overflow
patched

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

29.7%

JSON

Impact

The ERC721Consecutive contract designed for minting NFTs in batches does not update balances when a batch has size 1 and consists of a single token. Subsequent transfers from the receiver of that token may overflow the balance as reported by balanceOf.

The issue exclusively presents with batches of size 1.

Patches

The issue has been patched in 4.8.2.

Related

github 1
prion 1
cvelist 1
cve 1
osv 1
veracode 1
nvd 1
github
github
OpenZeppelin Contracts contains Incorrect Calculation
2023-03-03 20:02:16
prion
prion
Buffer overflow
2023-03-03 22:15:00
cvelist
cvelist
CVE-2023-26488 OpenZeppelin Contracts contains Incorrect Calculation
2023-03-03 21:08:34
cve
cve
CVE-2023-26488
2023-03-03 22:15:09
osv
osv
CVE-2023-26488
2023-03-03 22:15:09
veracode
veracode
Incorrect Calculation
2023-03-10 07:58:11
nvd
nvd
CVE-2023-26488
2023-03-03 22:15:09

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

29.7%

JSON
Related for OSV:GHSA-878M-3G6Q-594Q
github1prion1cvelist1cve1osv1veracode1nvd1