PT-2025-5631 · Lodestar · Lodestar

Published

2025-01-14

·

Updated

2025-01-14

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions: Lodestar (affected versions not specified)
Description: The issue affects the Lodestar client, which may fail to decode snappy framing compressed messages. This is due to the client's inability to handle reserved skippable chunks in the snappy framing format. The problem can lead to a chain stall when faulty nodes send messages that the Lodestar client cannot parse, while other clients can handle them. It's estimated that this issue could affect greater than or equal to 25% of the network, requiring a hard fork.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

GHSA-53RV-HCVM-RPP9

Affected Products

Lodestar