high7.5
CVE-2022-31264
Integer overflow in solana_rbpf
Impact
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | solana_rbpf | < 0.2.29 | 0.2.29 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solanalabs | Rbpf | before 0.2.29 |