Skip to content
OpenAdvisories

Product · paritytech

frontier

8 known vulnerabilities.

5 results · Clear filters · Feed

  • Medium 5.3

    Incorrect Calculation in Frontier leads to inflated Ethereum chain gas prices

    Frontier is an Ethereum compatibility layer for Substrate. Prior to commit d3beddc6911a559a3ecc9b3f08e153dbe37a8658, the worst case weight was always accounted as the block weight for all cases. In case of large EVM gas refunds, this can lead to block spammin…

  • Medium 5.3

    Discrepency in transfer value and actual value due to incorrect truncation in Frontier

    Frontier is Substrate's Ethereum compatibility layer. In affected versions the truncation done when converting between EVM balance type and Substrate balance type was incorrectly implemented. This leads to possible discrepancy between appeared EVM transfer va…

  • Medium 6.5

    Integer underflow in Frontier

    Frontier is Substrate's Ethereum compatibility layer. Prior to commit number `8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664`, a bug in Frontier's MODEXP precompile implementation can cause an integer underflow in certain conditions. This will cause a node crash fo…

  • Medium 5.3

    Validity check for signed Frontier-specific extrinsic not called in block execution

    Frontier is Substrate's Ethereum compatibility layer. In the newly introduced signed Frontier-specific extrinsic for `pallet-ethereum`, a large part of transaction validation logic was only called in transaction pool validation, but not in block execution. Ma…

  • Medium 5.3

    Transaction validity oversight in pallet-ethereum

    Frontier is Substrate's Ethereum compatibility layer. Prior to commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26, a bug in `pallet-ethereum` can cause invalid transactions to be included in the Ethereum block state in `pallet-ethereum` due to not validat…