Lucene search
+L

7 matches found

OSV
OSV
added 2026/08/28 8:26 p.m.15 views

CVE-2026-55763 Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance after the split loop and after the royaltiesToPay royaltiesToPay, so a valid PercentTransferPercentage = 10000 split...

8.7CVSS5.9AI score
SaveExploits0References5
NVD
NVD
added 2026/08/28 8:18 p.m.14 views

CVE-2026-54755

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go and core/kapp/kda/trigger.go sum those values in uint32...

9.6CVSS0.00386EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/28 4:23 p.m.8 views

CVE-2026-54755 Klever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go and core/kapp/kda/trigger.go sum those values in uint32...

9.6CVSS5.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/28 12:00 a.m.15 views

PT-2026-83228

Name of the Vulnerable Software and Affected Versions Klever-Go versions prior to 1.7.19 Description An integer overflow exists in the handling of split-royalty fields. The software validates split royalties by summing them into a uint32 accumulator and checking if the total is within...

9.6CVSS5.9AI score0.00386EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/05/29 5:14 p.m.17 views

CVE-2026-44697

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress data/batch/batch.go allows any peer that participates in a topic served by MultiDataInterceptor to allocate multi-gigabyte heaps on...

8.6CVSS5.8AI score0.0038EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/29 5:14 p.m.19 views

CVE-2026-44697 Klever-Go MultiDataInterceptor: remote OOM via crafted compressed P2P payload

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, a remote, unauthenticated denial-of-service vulnerability in Batch.Decompress data/batch/batch.go allows any peer that participates in a topic served by MultiDataInterceptor to allocate multi-gigabyte heaps on...

8.6CVSS5.8AI score0.0038EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.21 views

Klever Blockchain 安全漏洞

Klever Blockchain is a high-performance blockchain network implemented by Klever in open source. Versions of Klever Blockchain prior to 1.7.17 contained security vulnerabilities. These vulnerabilities stemmed from a remote unauthenticated denial-of-service issue in the Batch.Decompress function...

8.6CVSS5.8AI score0.0038EPSS
SaveExploits0References1
Rows per page
Query Builder