PT-2025-7646 · Apps · Apps
Published
2025-02-20
·
Updated
2025-02-20
CVSS v4.0
9.2
Critical
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H |
Name of the Vulnerable Software and Affected Versions
apps versions prior to 1.1.0
Description
A malicious transaction can cause an expensive computation in mempool validation due to exponential growth in section hash calculation for signature validation when a transaction contains multiple repeated sections. This can significantly slow down node operations.
Recommendations
For versions prior to 1.1.0, update to version 1.1.0 to resolve the issue, as it includes patches that check transaction sections for uniqueness and limit the number of permitted sections to 10,000.
Fix
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apps