paritytech

Products

ProductCVEsExploitedLatest
frontier8–Oct 13, 2023
ink1–Jun 14, 2023

Exploited and recent CVEs

  • CVE-2023-45130 High 7.5 Frontier opcode SUICIDE touches too many storage values on large contracts 1.0%
  • CVE-2023-34449 Medium 5.3 ink! vulnerable to incorrect decoding of storage value when using `DelegateCall` 1.0%
  • CVE-2023-28431 High 7.5 Frontier's modexp precompile is slow for even modulus 0.9%
  • CVE-2022-39242 Medium 5.3 Incorrect Calculation in Frontier leads to inflated Ethereum chain gas prices 0.8%
  • CVE-2022-36008 High 7.1 Message length overflow in frontier 1.2%
  • CVE-2022-31111 Medium 5.3 Discrepency in transfer value and actual value due to incorrect truncation in Frontier 1.4%
  • CVE-2022-21685 Medium 6.5 Integer underflow in Frontier 1.3%
  • CVE-2021-41138 Medium 5.3 Validity check for signed Frontier-specific extrinsic not called in block execution 1.4%
  • CVE-2021-39193 Medium 5.3 Transaction validity oversight in pallet-ethereum 1.2%