Solidity 缓冲区错误漏洞

Solidity is a high-level programming language. A security vulnerability exists in Solidity version 0.7.5 due to a stack-use-after-return in "smtutil::CHCSmtLib2Interface::querySolver".No details of the vulnerability are available at this time...

PT-2021-12042

Name of the Vulnerable Software and Affected Versions: Solidity version 0.7.5 Description: The issue is related to a stack-use-after-return problem in the smtutil::CHCSmtLib2Interface::querySolver function. Recommendations: For Solidity version 0.7.5, at the moment, there is no information about ...

Actual yield source check on address will succeed for non-existent contract

Handle 0xRajeev Vulnerability details Impact Low-level calls call/delegatecall/staticcall return true even if the account called is non-existent per EVM design. Solidity documentation warns: "The low-level functions call, delegatecall and staticcall return true as their first return value if the...

Beebots.TradeValid() Will Erroneously Return True When Maker Is Set To Address(0) and makerIds Are Set To The TokenIds of Unminted Beebot NFTs

Handle jvaqa Vulnerability details Impact Beebots.TradeValid Will Erroneously Return True When Maker Is Set To Address0 and makerIds Are Set To The TokenIds of Unminted Beebot NFTs Beebots.verify Returns True No Matter What Signature Is Given When Signer Is Set To address0. This means that...

VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption

Background @tjayrush reported a data handling issue with certain Web3 libraries using Vyper-deploy forwarder proxy contracts using our Vyper's built-in createforwarderto function prior to our change to support EIP-1167 style forwarder proxies. Impact If you are an end user of a forwarder-style...

Reentrancy Attack

openzeppelin-solidity is vulnerable to reentrancy attack. The vulnerability exists when a extend custom beforeTokenTransfer is invoked when burning tokens and before the send hook is externally called on the sender while token balances are adjusted after the process and this may cause the...

solidity:abiv2_isabelle_ossfuzz: Segv on unknown address in abiv2_isabelle_ossfuzz

Detailed Report: https://oss-fuzz.com/testcase?key=4833370093780992 Project: solidity Fuzzing Engine: libFuzzer Fuzz Target: abiv2isabelleossfuzz Job Type: libfuzzerasansolidity Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: abiv2isabelleossfuzz Sanitizer:...

OSV-2020-2131 Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26997 Crash type: Stack-use-after-return READ 8 Crash state: solidity::smtutil::CHCSmtLib2Interface::querySolver solidity::smtutil::CHCSmtLib2Interface::query solidity::frontend::CHC::query...

PT-2020-22123

Name of the Vulnerable Software and Affected Versions solidity affected versions not specified Description The issue is related to a stack-use-after-return crash in the solidity software. The crash occurs in the solidity::smtutil::CHCSmtLib2Interface::querySolver function, which is called by...

solidity:solc_noopt_ossfuzz: Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver

Project: https://github.com/ethereum/solidity.git Detailed Report: https://oss-fuzz.com/testcase?key=5750916210491392 Project: solidity Fuzzing Engine: afl Fuzz Target: solcnooptossfuzz Job Type: aflasansolidity Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address:...

solidity:strictasm_diff_ossfuzz: Heap-buffer-overflow in solidity::yul::AsmAnalyzer::operator

Project: https://github.com/ethereum/solidity.git Detailed Report: https://oss-fuzz.com/testcase?key=5676096461996032 Project: solidity Fuzzing Engine: libFuzzer Fuzz Target: strictasmdiffossfuzz Job Type: libfuzzerasansolidity Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

Slither v0.6.7 - Static Analyzer For Solidity

Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...

ethers-cli (>=3.0.4, <=4.0.0), ethers-meow (>=0.1.1, <=0.1.3) +4 more potentially affected by CVE-2018-19183 via ethereumjs-vm (>=2.3.1, <=2.4.0)

ethereumjs-vm NPM version =2.3.1, =3.0.4, =0.1.1, =0.0.1, =1.1.6, =1.1.41 - newstudio-lib 0.1.0 - remix-solidity 0.0.1 Source cves: CVE-2018-19183 Source advisory: OSV:GHSA-2MW7-WGGM-M6W3...

Slither - Static Analyzer For Solidity

Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...

Learn Ethereum Development – Build Decentralized Blockchain Apps

As of today — 1 Bitcoin = $7300 USD Approx 471,000 INR At the beginning of this year, 1 Bitcoin was approximately equal to $1000, and now it has surged to a new height, marking its market capitalization at over $124 billion. Is it really too late to invest in Bitcoin or other cryptocurrencies lik...