5 matches found
Assembly proxy creation lacks bytecode validation, enabling arbitrary contract deployment.
Lines of code Vulnerability details Impact The proxy contract creation uses assembly to compute the create2 address. But it does not verify the deployed bytecode matches expectations. The use of assemble for proxy contract creation has potential risks if the bytecode is not validated. This could...
Eclipse OpenJ9 安全漏洞
Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A security vulnerability exists in Eclipse Openj9 versions prior to 0.32.0 that stems from Java 8 & 11's inability to throw an exception caught during bytecode validati...
CVE-2004-2627
Java 2 Micro Edition J2ME does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine KVM sandbox and execute arbitrary code...
CVE-2004-2627
CVE-2004-2627 involves Java 2 Micro Edition (J2ME). The issue is that J2ME does not properly validate bytecode, which enables remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code. The available connected docs reiterate the same description and do not pr...
CVE-2004-2627
Java 2 Micro Edition J2ME does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine KVM sandbox and execute arbitrary code...