Skip to content
OpenAdvisories

Vendor

paritytech

9 known vulnerabilities.

Products

frontier 8 ink 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2023-45130

    Frontier opcode SUICIDE touches too many storage values on large contracts

    Frontier is Substrate's Ethereum compatibility layer. Prior to commit aea528198b3b226e0d20cce878551fd4c0e3d5d0, at the end of a contract execution, when opcode SUICIDE marks a contract to be deleted, the software uses `storage::remove_prefix` (now renamed to …

    paritytech frontier
  • High 7.5
    CVE-2023-28431

    Frontier's modexp precompile is slow for even modulus

    Frontier is an Ethereum compatibility layer for Substrate. Frontier's `modexp` precompile uses `num-bigint` crate under the hood. In the implementation prior to pull request 1017, the cases for modulus being even and modulus being odd are treated separately. …

    paritytech frontier pallet-evm-precompile-modexp crates.io
  • High 7.1
    CVE-2022-36008

    Message length overflow in frontier

    Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by …

    paritytech frontier fc-rpc crates.io