CVE-2020-24838

Katalog CVE

CVSS 7.5 · High EPSS 1,4%

Kerentanan Integer Overflow or Wraparound pada issuer project issuer. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An integer overflow has been found in the the latest version of Issuer. The total issuedCount can be zero if the parameter is overly large. An attacker can obtain the private key of the owner issued with a certain 'amount', and the issuedCount can be zero if there is an overflow.

Rincian

Terbit di NVD

10 Februari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://etherscan.io/address/0xecaad8df0dee0b9ed45ffd1191b024701f21506c#code patch · advisory pihak ketiga