489 matches found
CVE-2024-21629
Rust EVM is an Ethereum Virtual Machine interpreter. In rust-evm, a feature called recordexternaloperation was introduced, allowing library users to record custom gas changes. This feature can have some bogus interactions with the call stack. In particular, during finalization of a CREATE or...
CVE-2021-41122
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions external functions did not properly validate the bounds of decimal arguments. The can lead to logic errors. This issue has been resolved in version 0.3.0...
CVE-2021-25836
Cosmos Network Ethermint = v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memorystateObject.code and is further written to persistent store at the Endblock stage, which may be utilized to build honeypot contrac...
CVE-2021-25834
Cosmos Network Ethermint = v0.4.0 is affected by a transaction replay vulnerability in the EVM module. If the victim sends a very large nonce transaction, the attacker can replay the transaction through the application...
CVE-2011-1104
Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...
Malicious code in evm-validator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494cc8b639f73ed70f7e4ee37496ef90ce35133711784f16e856e73ee4badb06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4051 Malicious code in evm-validator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494cc8b639f73ed70f7e4ee37496ef90ce35133711784f16e856e73ee4badb06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Code Injection
github.com/cosmos/evm are vulnerable to Code Injection. The vulnerability is due to setting lower EVM call gas limits, which allows the precompile code to partially execute and then fail without reverting the already made state changes...
GO-2025-3684 Cosmos EVM Allows Partial Precompile State Writes in github.com/cosmos/evm
Cosmos EVM Allows Partial Precompile State Writes in github.com/cosmos/evm...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection through the improper handling of gas limits in precompile executions. An attacker can manipulate the state of the blockchain by causing certain functions to execute with insufficient gas, leading to incomplete...
Cosmos EVM Allows Partial Precompile State Writes
Impact Setting lower EVM call gas allows users to partially execute precompiles and error at specific points in the precompile code without reverting the partially written state. If executed on the distribution precompile when claiming funds, it could cause funds to be transferred to a user witho...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection through the improper handling of gas limits in precompile executions. An attacker can manipulate the state of the blockchain by causing certain functions to execute with insufficient gas, leading to incomplete...
GHSA-MJFQ-3QR2-6G84 Cosmos EVM Allows Partial Precompile State Writes
Impact Setting lower EVM call gas allows users to partially execute precompiles and error at specific points in the precompile code without reverting the partially written state. If executed on the distribution precompile when claiming funds, it could cause funds to be transferred to a user witho...
Malicious code in evm-validator (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3445 Malicious code in evm-validator (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ton-evm-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e3402e5b7c8513fbd68507b2a18f6538cdd485f16cace59be82da512cf1a99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3264 Malicious code in ton-evm-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e3402e5b7c8513fbd68507b2a18f6538cdd485f16cace59be82da512cf1a99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OESA-2025-1282 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer dereference With newer versions of GCC, there is a panic in da850evmconfigemac when booting multiv5defconfig in QEMU...
