CVE-2024-11991

The CVE-2024-11991 entry concerns Motoko’s incremental garbage collector, where an uninitialized memory access arises from incorrect use of write barriers in a few locations. Documents confirm the vulnerability affects Motoko and that exploitation requires enabling non-default features (the incre...

Motoko 安全漏洞

Motoko is a secure, simple, participant-based programming language open-sourced by DFINITY for building Internet Computer ICP jar smart contracts. Motoko has a security vulnerability that stems from the incremental garbage collector containing an uninitialized memory access error...