Skip to content
OpenAdvisories

Package · crates.io

evm

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2024-21629

    Erroneous handling of `record_external_operation` error return

    Rust EVM is an Ethereum Virtual Machine interpreter. In `rust-evm`, a feature called `record_external_operation` was introduced, allowing library users to record custom gas changes. This feature can have some bogus interactions with the call stack. In particu…

    rust-ethereum evm evm crates.io
  • Medium 5.9
    CVE-2022-39354

    evm has incorrect is_static parameter for custom stateful precompiles

    SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the `is_static` parameter to determine if the call is executed in a static context (via `STATICCALL`), and thus decide if stateful operation…

    rust-blockchain evm evm crates.io
  • Medium 6.5
    CVE-2021-29511

    Memory over-allocation in evm crate

    evm is a pure Rust implementation of Ethereum Virtual Machine. Prior to the patch, when executing specific EVM opcodes related to memory operations that use `evm_core::Memory::copy_large`, the `evm` crate can over-allocate memory when it is not needed, making…

    rust-blockchain evm evm evm-core crates.io