Skip to content
OpenAdvisories

Vendor

Internet Computer

5 known vulnerabilities.

Products

ic-cdk 1 Candid 1 ic-stable-structures 1 agent-js 1 Motoko 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-7884

    Memory leak when calling a canister method via `ic_cdk::call`

    When a canister method is called via ic_cdk::call* , a new Future CallFuture is created and can be awaited by the caller to get the execution result. Internally, the state of the Future is tracked and stored in a struct called CallFutureState. A bug in the po…

    Internet Computer ic-cdk ic-cdk ic_cdk crates.io
  • High 7.5
    CVE-2023-6245

    Infinite decoding loop through specially crafted payload

    The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is `record { * ; empty }` and the canister interface expects `record { * }` then the Rust candid decoder treats empty a…

    Internet Computer Candid candid crates.io