CVE-2022-31172

OpenZeppelin Contracts is a library for smart contract development. Versions 4.1.0 until 4.7.1 are vulnerable to the SignatureChecker reverting. "SignatureChecker.isValidSignatureNow" is not expected to revert. However, an incorrect assumption about Solidity 0.8's "abi.decode" allows some cases t...