Vendor/product archive

solanalabs / rbpf CVEs

Beta · best-effort

2 CVEs tagged to solanalabs / rbpf — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to solanalabs vendor archive

CVE-2022-31264

Published May 21, 2022

Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-46102

Published Jan 27, 2022

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly from ELF file witho…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1