Skip to content
OpenAdvisories

Package · crates.io

nimiq-block

1 known vulnerabilities.

1 result · Feed

  • Critical 9.6

    nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation

    nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBlockProof::verify` computes its quorum check using `BitSet.len()`, then iterates `BitSet` indices and casts each `usize` index to `u16` (`slot as u16`) for slot lookup. Pri…