tocsin

crates.io/ic-cdk CVE-2024-7884: high 7.5, EPSS 0.69%

Memory leak when calling a canister method via `ic_cdk::call`

Action: Upgrade ic-cdk to 0.8.2 or later.

cargo update -p ic-cdk --precise 0.8.2
cargo update -p ic-cdk --precise 0.9.3
cargo update -p ic-cdk --precise 0.10.1
cargo update -p ic-cdk --precise 0.11.6
cargo update -p ic-cdk --precise 0.12.2
cargo update -p ic-cdk --precise 0.13.5
cargo update -p ic-cdk --precise 0.14.1
cargo update -p ic-cdk --precise 0.15.1
cargo update -p ic-cdk --precise 0.16.0

Affected

introducedfixedlast affected
0.8.00.8.2-
0.9.0-00.9.3-
0.10.0-00.10.1-
0.11.0-00.11.6-
0.12.0-00.12.2-
0.13.0-00.13.5-
0.14.0-00.14.1-
0.15.0-00.15.1-
0.16.0-00.16.0-

Fixed versions

0.8.20.9.30.10.10.11.60.12.20.13.50.14.10.15.10.16.0

Sources

CVE-2024-7884 · published · modified · JSON