solanalabs records
4 published records for vendor solanalabs.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-190 Integer Overflow or Wraparound2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-670 Always-Incorrect Control Flow Implementation1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
31Monitor | CVE-2021-46102No exploit | From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_valsolanalabs · rbpf · CWE-190 | High7.5 | 1.8%Jan 27, 2022 |
30Monitor | CVE-2022-31264No exploit | Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers.solanalabs · rbpf · CWE-190 | High7.5 | 1.3%May 21, 2022 |
30Monitor | CVE-2024-30253No exploit | Handling untrusted input can result in a crash, leading to loss of availability / denial of servicesolana-labs · solana-web3.js · CWE-119 | High7.5 | 0.5%Apr 17, 2024 |
21Monitor | CVE-2022-35917No exploit | Weakness in Transfer Validation Logic in @solana/paysolanalabs · pay · CWE-670 | Medium5.3 | 0.8%Aug 1, 2022 |
- CVE-2021-4610231Monitor
From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_val
HighCVSS 7.5No exploitEPSS 1%solanalabs · rbpfJan 27, 2022
- CVE-2022-3126430Monitor
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers.
HighCVSS 7.5No exploitEPSS 1%solanalabs · rbpfMay 21, 2022
- CVE-2024-3025330Monitor
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
HighCVSS 7.5No exploitEPSS 0%solana-labs · solana-web3.jsApr 17, 2024
- CVE-2022-3591721Monitor
Weakness in Transfer Validation Logic in @solana/pay
MediumCVSS 5.3No exploitEPSS 0%solanalabs · payAug 1, 2022