Lucene search
+L

1 matches found

OSV
OSV
added 2023/07/25 5:46 p.m.111 views

GHSA-F5X6-7QGP-JHF3 ecrecover can return undefined data if signature does not verify

Impact the ecrecover precompile does not fill the output buffer if the signature does not verify, see https://github.com/ethereum/go-ethereum/blob/b058cf454b3bdc7e770e2b3cec83a0bcb48f55ee/core/vm/contracts.goL188. however, the ecrecover builtin will still return whatever is at memory location 0...

6.9CVSS6.1AI score0.00574EPSS
SaveExploits1References5
Rows per page
Query Builder