PT-2024-40053 · Eth Abi · Eth Abi
Published
2024-03-05
·
Updated
2024-03-05
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
eth-abi (affected versions not specified)
Description
The issue is related to a recursive pointer problem. It can cause an OverflowError when decoding a specially crafted payload using the
decode function from the eth abi module. The error occurs because the payload is too large to be converted to a C ssize t. The vulnerability can be triggered by passing a maliciously crafted bytearray to the decode function, which can lead to a crash or potentially allow an attacker to execute arbitrary code.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Eth Abi