CVE-2024-21629
1 advisory.
crates.io/evm CVE-2024-21629: medium 5.9, EPSS 0.58%
Rust EVM erroneousle handles `record_external_operation` error return
Action: Upgrade evm to 0.41.1 or later.
cargo update -p evm --precise 0.41.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.41.1 | - |
Fixed versions
| 0.41.1 |
Sources
- osv: GHSA-27wg-99g8-2v4v
- https://github.com/rust-ethereum/evm/security/advisories/GHSA-27wg-99g8-2v4v
- https://nvd.nist.gov/vuln/detail/CVE-2024-21629
- https://github.com/rust-ethereum/evm/pull/264
- https://github.com/rust-ethereum/evm/commit/d8991ec727ad0fb64fe9957a3cd307387a6701e4
- https://github.com/rust-ethereum/evm
- https://github.com/rust-ethereum/evm/blob/release-v041/src/executor/stack/executor.rs#L1012C25-L1012C69
CVE-2024-21629 · published · modified · JSON