CVE-2024-21629

creationtimestamp| type| source ---|---|--- 2024-01-02 23:26:57+00:00| seen| https://t.me/ctinow/162096 2024-01-03 01:38:22+00:00| seen| https://t.me/cibsecurity/74214 2024-01-23 09:21:30+00:00| seen| https://t.me/ctinow/171785...

CVE-2024-21629 Erroneous handling of `record_external_operation` error return

Rust EVM is an Ethereum Virtual Machine interpreter. In rust-evm, a feature called recordexternaloperation was introduced, allowing library users to record custom gas changes. This feature can have some bogus interactions with the call stack. In particular, during finalization of a CREATE or...

CVE-2024-21629

Rust EVM contains a vulnerability in the record_external_operation feature of rust-evm. During finalization of CREATE/CREATE2, if substack execution succeeds, the substate is committed before calling record_external_operation(Write(out_code.len())). If record_external_operation later fails, the e...