~ / search / GHSA-ffx3-8qvm-pq3j

GHSA-ffx3-8qvm-pq3j

Integer overflow in solana_rbpf

Source: GitHub Advisory Database (reviewed) High CVE-2022-31264

Packages

EcosystemPackageAffectedFixed in
crates.io solana_rbpf < 0.2.29 0.2.29

Details

As written in the advisory (Markdown source, shown as plain text).

Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program.

References

External links from the advisory. They lead to third-party sites.