CVE-2021-32283

An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function gravitystringtovalue located in gravityvalue.c. It allows an attacker to cause Denial of Service...

CVE-2021-32283

CVE-2021-32283 affects the Gravity project up to version 0.8.1. The vulnerability is a NULL pointer dereference in the function gravity_string_to_value() in gravity_value.c, which can lead to Denial of Service . Exploit status, impact scope, and remediation details are not provided in the supplie...

CVE-2021-32284

Gravity up to 0.8.1 contains a NULL pointer dereference in ircode_register_pop_context_protect() (gravity_ircode.c), allowing an attacker to cause a Denial of Service. This CVE (CVE-2021-32284) is described across multiple sources (NVD, CNVD, Red Hat, OSV, CNVD). Affected versions: Gravity 0.8.1 ...

CVE-2021-32281

The CVE-2021-32281 issue affects the Gravity language (versions up to and including 0.8.1). A heap-buffer-overflow is located in the function gnode_function_add_upvalue within gravity_ast.c, which can allow an attacker to achieve code execution. The available connected documents confirm the affec...

CVE-2021-32282

An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function ircodeaddcheck located in gravityircode.c. It allows an attacker to cause Denial of Service...

CVE-2021-32281

An issue was discovered in gravity through 0.8.1. A heap-buffer-overflow exists in the function gnodefunctionaddupvalue located in gravityast.c. It allows an attacker to cause code Execution...

CVE-2021-32282

CVE-2021-32282 affects Gravity up to 0.8.1. A NULL pointer dereference in ircode_add_check() (gravity_ircode.c) can lead to Denial of Service. The vulnerability is documented across multiple sources in the connected set, confirming the affected component/file and the impact. No exploit or detaile...

CVE-2021-32285

An issue was discovered in gravity through 0.8.1. A NULL pointer dereference exists in the function listiteratornext located in gravitycore.c. It allows an attacker to cause Denial of Service...

CVE-2021-32285

CVE-2021-32285 affects Gravity up to version 0.8.1. A NULL pointer dereference in the function list_iterator_next() (gravity_core.c) can lead to Denial of Service. The linked sources confirm the vulnerability details and impact but do not provide specific exploit code, affected platforms, or a co...

Gravity 代码问题漏洞

Gravity is a powerful, dynamically typed, lightweight, embeddable programming language written in C. It is used for procedural programming, object-oriented programming, and data-driven programming. It is used for procedural, object-oriented, functional, and data-driven programming. Gravity suffer...

gravity 代码问题漏洞

Gravity is a powerful, dynamically typed, lightweight, embedded programming language written in C. A null pointer dereference vulnerability exists in the listiteratornext function in gravitycore.c in Gravity 0.8.1 and earlier versions. An attacker could exploit this vulnerability to cause a denia...

gravity 代码问题漏洞

Gravity is a powerful, dynamically typed, lightweight, embedded programming language written in C. A null pointer dereference vulnerability exists in the ircoderegisterpopcontextprotect function in gravityircode.c in Gravity 0.8.1 and earlier versions. An attacker could exploit this vulnerability...

gravity 代码问题漏洞

Gravity is a powerful, dynamically typed, lightweight, embedded programming language written in C. A null pointer dereference vulnerability exists in the gravitystringtovalue function in gravityvalue.c in Gravity 0.8.1 and earlier versions. An attacker could exploit this vulnerability to cause a...

Gravity 缓冲区错误漏洞

Gravity is a powerful, dynamically typed, lightweight, embeddable programming language written in C. It is used for procedural programming, object-oriented programming, and data-driven programming. It is used for procedural, object-oriented, functional, and data-driven programming. A buffer error...

Cannot actually submit evidence

Handle jmak Vulnerability details Impact Detailed description of the impact of this finding. The SubmitBadSignatureEvidence is not actually registered in the handler and hence no one can actually submit this message, rendering the message useless. This harms the security model of Gravity since...

Incorrect accounting on transfer-on-fee/deflationary tokens in Gravity

Handle shw Vulnerability details Impact The sendToCosmos function of Gravity transfers amount of tokenContract from the sender using the function transferFrom. If the transferred token is a transfer-on-fee/deflationary token, the actually received amount could be less than amount. However, since...

Lack of sufficient power check in updateValset of Gravity

Handle shw Vulnerability details Impact The updateValset function does not check whether the new valset has sufficient power to pass a vote see the constructor for more details. If the new valset does not, any function calling checkValidatorSignatures will be disabled since the transaction revert...

Filter Logic calls to gravity cosmos at client level to avoid reverts

Handle hack3r-0m Vulnerability details Add a check for call.logiccontractaddress to make sure it is not the same as gravity contract to avoid panics from the orchestrator by failing gas estimations --- The text was updated successfully, but these errors were encountered: All reactions...

Arbitrary Logic Enables ERC20 Theft

Handle ElliotFriedman Vulnerability details Severe Issue: ERC20 Token Theft Using Arbitrary Logic There are 2 ways that this bug can be used to drain funds from the bridge. Both are catastrophic and result in total loss of funds. The 1st method is horrible, the second method is diabolical as it c...

CVE-2020-27852

A stored Cross-Site Scripting XSS vulnerability in the survey feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via a textarea field. This code is interpreted by users in a privileged role Administrator, Editor, etc...