CVE-2021-29635

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Design/Logic Flaw

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...

Double Free

Overview Affected versions of this package are vulnerable to Double Free due to improper loop checks in the poolfree function, which is part of the pool series allocator alongside poolmalloc and poolrealloc. An attacker can execute arbitrary code remotely by exploiting this flaw. PoC c include...

Double Free

Overview ibireme/yyjson is a C JSON library binding Affected versions of this package are vulnerable to Double Free due to improper loop checks in the poolfree function, which is part of the pool series allocator alongside poolmalloc and poolrealloc. An attacker can execute arbitrary code remotel...

CVE-2024-25713: Improper Control of Generation of Code

yyjson through 0.8.0 has a double free, leading to remote code execution in some cases, because the poolfree function lacks loop checks. poolfree is part of the pool series allocator, along with poolmalloc and poolrealloc...

CVE-2024-25713

yyjson through 0.8.0 has a double free, leading to remote code execution in some cases, because the poolfree function lacks loop checks. poolfree is part of the pool series allocator, along with poolmalloc and poolrealloc...

PT-2024-21108

Name of the Vulnerable Software and Affected Versions yyjson versions 0.8.0 and earlier Description The issue is related to a double free vulnerability in the pool series allocator, specifically due to the lack of loop checks in the pool free function. This can lead to remote code execution in so...

CVE-2023-47170

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2023...

GHSA-H4C3-5275-VRMG Nervos CKB Pool does not remove the conflicting transactions from the statistics

Impact There's a bug in the pool statistics that when conflicting transactions are removed from the pool, they are not subtracted from the statics. Finally, the transaction pool keeps full and reject all transactions. Patches 0.39.2 Workarounds Restart the CKB node...

Nervos CKB Pool does not remove the conflicting transactions from the statistics

Impact There's a bug in the pool statistics that when conflicting transactions are removed from the pool, they are not subtracted from the statics. Finally, the transaction pool keeps full and reject all transactions. Patches 0.39.2 Workarounds Restart the CKB node...

Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result

Impact Tx-pool verify transaction which inputs' script contains loadcelldatahash is nondeterministic Workarounds Enforce tx-pool ResolvedTrascation inputs' load data is none...

PT-2024-40310 · Ckb · Ckb

Name of the Vulnerable Software and Affected Versions: CKB node versions prior to 0.39.2 Description: A bug in the pool statistics causes conflicting transactions to not be subtracted when removed from the pool, leading to the transaction pool becoming full and rejecting all transactions...

PT-2024-40422

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue concerns a nondeterministic verification of transactions in the tx-pool when the inputs' script contains load cell data hash. Recommendations At the moment, there is no...

Monero: Transactions in invalid blocks are kept in tx-pool without undergoing certain checks.

The transactions in invalid blocks were kept in the tx-pool without undergoing certain checks. When adding blocks to the blockchain, monerod first added the transactions to the tx pool with relaymethod::block, which allowed the tx-pool to skip certain checks like fee and extra field size. However...