Denial of service when baseAmount is equal to zero

Lines of code Vulnerability details Vulnerability details Description There is a finalize function in the SizeSealed smart contract. The function traverses the array of the bids sorted by price descending. On each iteration, it calculates the quotePerBase. When this variable is calculated, the...

Bidder can steal all the base token by repeatedly calling finalize()

Lines of code Vulnerability details Impact All the base token will be stolen by malicious bidder, even worse the bidder might pay nothing at the end. Proof of Concept Anyone can call finalize, and it can be called multiple times. FinalizeData memory data is local, which means in each call, data i...

[PNM-002] finalize with malicious input may lock bidder funds in the contract

Lines of code Vulnerability details Description The finalize function of the contract SizeSealed is used to finalize an auction, allowing the auctioner or seller to be paid quote tokens and also eventually allowing successful bidders to withdraw base tokens. Once the finalize function is called,...

Some cases maybe cause the bids unable to get their funds back.

Lines of code Vulnerability details Impact All of the following there cases maybe cause the bids unable to get their funds back. Details case1: If sellerwho is a bad man does not reveal in the reveal period, then all the bids will be unable to get their funds back. case2: If sellerwho is a bad ma...

Seller can steal all the bid fund by repeatedly calling finalize()

Lines of code Vulnerability details Impact Bidders' fund will be stolen by malicious seller, they can not get refund. Proof of Concept In finalize, FinalizeData memory data is local, which means in each call, data is re-initialized. By calling finalize multiple times, a malicious seller can get t...

PT-2022-36736 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the gs font finalize and gs gc reclaim functions, and the ireclaim process. No...

PT-2022-37303 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

mariadb: server crash in create_tmp_table::finalize

A flaw was found in MariaDB. The component, Createtmptable::finalize, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

DEBIAN-CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

GPAC 代码问题漏洞

GPAC is a multimedia framework. GPAC MP4Box version 1.1.0 suffers from a denial of service vulnerability that originates in the gfhintertrackfinalize function. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...

GPAC 安全漏洞

GPAC is a multimedia framework. GPAC version 1.0.1 suffers from a denial of service vulnerability that stems from the gfhintertrackfinalize function not doing the correct handling of incoming error messages. An attacker could exploit this vulnerability to cause a denial of service via a specially...

PT-2025-8629 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.0-rc4 Description: A use-after-free issue was found in the Linux kernel, specifically in the tipc named reinit function. This issue was identified by syzbot and is related to a deadlock when flushing...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in Createtmptable::finalize which allows an attacker to crash the application via specially malicious SQL statements...

kernel: RDMA/uverbs: NULL pointer dereference in uapi_finalize()

An issue was discovered in the Linux kernel through 5.16-rc6. uapifinalize in drivers/infiniband/core/uverbsuapi.c lacks check of kmallocarray...

kernel: RDMA/uverbs: NULL pointer dereference in uapi_finalize()

An issue was discovered in the Linux kernel through 5.16-rc6. uapifinalize in drivers/infiniband/core/uverbsuapi.c lacks check of kmallocarray...

CVE-2022-27378

A flaw was found in MariaDB. The component, Createtmptable::finalize, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

AZL-9357 CVE-2022-27378 affecting package mariadb for versions less than 10.6.8-1

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

CVE-2022-27378

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

The vulnerability of the gf_hinter_finalize function in the MP4Box multimedia platform of GPAC allows a perpetrator to cause a service failure.

The vulnerability of the gfhinterfinalize function in the MP4Box multimedia platform of GPAC is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...