CVE-2025-47270

creationtimestamp| type| source ---|---|--- 2025-05-12 14:26:21+00:00| seen| https://t.me/cvedetector/25073 2025-05-12 14:42:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loy7duqxwj2h...

CVE-2025-47270

The CVE-2025-47270 entry concerns nimiq/core-rs-albatross, specifically the nimiq-network-libp2p subcrate. The vulnerability arises in Discovery message handling, which allocates a buffer based on a length value provided by the peer without an upper bound. Because the length is a u32, an attacker...

CVE-2025-47270 nimiq-network-libp2p Uncontrolled Resource Consumption vulnerability

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The nimiq-network-libp2p subcrate of nimiq/core-rs-albatross is vulnerable to a Denial of Service DoS attack due to uncontrolled memory allocation. Specifically, the...