Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/01/28 10:59 p.m.47 views

Integer overflow in solana_rbpf

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.stvalue is read directly from ELF file without checking. If the sym.stvalue is rather large, an integer overflow is triggered while calculating the variable "addr"...

7.5CVSS7.5AI score0.01872EPSS
SaveExploits1References7Affected Software1
Prion
Prion
added 2022/01/27 6:15 p.m.23 views

Integer overflow

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.stvalue is read directly from ELF file without checking. If the sym.stvalue is rather large, an integer overflow is triggered while calculating the variable "addr"...

5CVSS7.5AI score0.01872EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder