Paritytech
9 CVEs across 2 Paritytech products. Browse Paritytech vulnerabilities, severities, and proof-of-concept exploits.
Paritytech products with known CVEs
Paritytech CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2023-45130 | High | 7.5 | 2023-10-13 | Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode… |
CVE-2023-34449 | Medium | 5.3 | 2023-06-14 | ink! is an embedded domain specific language to write smart contracts in Rust for blockchains built on the Substrate framework. Starting in version 4.0.0 and p… |
CVE-2023-28431 | High | 7.5 | 2023-03-22 | Frontier is an Ethereum compatibility layer for Substrate. Frontier's `modexp` precompile uses `num-bigint` crate under the hood. In the implementation prior t… |
CVE-2022-39242 | Medium | 5.3 | 2022-09-24 | Frontier is an Ethereum compatibility layer for Substrate. Prior to commit d3beddc6911a559a3ecc9b3f08e153dbe37a8658, the worst case weight was always accounted… |
CVE-2022-36008 | High | 7.1 | 2022-08-19 | Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM rev… |
CVE-2022-31111 | Medium | 5.3 | 2022-07-06 | Frontier is Substrate's Ethereum compatibility layer. In affected versions the truncation done when converting between EVM balance type and Substrate balance t… |
CVE-2022-21685 | Medium | 6.5 | 2022-01-14 | Frontier is Substrate's Ethereum compatibility layer. Prior to commit number `8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664`, a bug in Frontier's MODEXP precompile… |
CVE-2021-41138 | Medium | 5.3 | 2021-10-13 | Frontier is Substrate's Ethereum compatibility layer. In the newly introduced signed Frontier-specific extrinsic for `pallet-ethereum`, a large part of transac… |
CVE-2021-39193 | Medium | 5.3 | 2021-09-03 | Frontier is Substrate's Ethereum compatibility layer. Prior to commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26, a bug in `pallet-ethereum` can cause inv… |