2 matches found
Out-of-bounds Read
@openzeppelin/contracts and @openzeppelin/contracts-upgradeable are vulnerable to Out-of-bounds Read. The vulnerability is due to improper bounds checking caused by the lastIndexOf function in Bytes.sol accessing uninitialized memory when given an empty buffer and a non-maximum position,...
6.9CVSS6.3AI score0.0035EPSS
SaveExploits0References5Affected Software2
20