CVE-2020-36402

CVE-2020-36402 affects Solidity 0.7.5 with a stack-use-after-return in smtutil::CHCSmtLib2Interface::querySolver. Multiple sources describe the issue; OSV notes a so‑called fix field but states there is no corresponding code change. CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, no priv...

CVE-2022-33069

CVE-2022-33069 pertains to Ethereum Solidity v0.8.14, where an assertion failure occurs in SMTEncoder::indexOrMemberAssignment() (SMTEncoder.cpp). This description is consistently stated across sources and is the core concrete detail: the vulnerability arises from an assertion failure in the SMT ...