solana-labs/solana-web3.js · Security
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
- GHSA ID
- GHSA-8m45-2rjm-j347
- CVE ID
- CVE-2024-30253
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Using particular inputs with @solana/web3.js will result in memory exhaustion (OOM).
If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a loss of availability.
CWEs
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer