CVE-2024-32873lowCWE-682

CVE-2024-32873: falha de baixa gravidade em evmos

evmos allows transferring unvested tokens after delegations

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar evmos+ Monitorar github.com/evmos/evmos

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.5epss 0.4%
Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. The spendable balance is not updated properly when delegating vested tokens. The issue allows a clawback vesting account to anticipate the release of unvested tokens. This vulnerability is fixed in 18.0.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Produtos afetados
evmos · evmos
CVEs relacionadas — evmos

No mesmo produto, das mais perigosas para as menos.

CVE-2024-32644CRITICALEvmos' transaction execution not accounting for all state transition after interaction with precompilesEPSS 0.9%CVE-2024-37153HIGHEvmos's contract balance not updating correctly after interchain transactionEPSS 0.6%CVE-2024-39696HIGHEvmos vulnerable to exploit of smart contract account and vestingEPSS 0.5%CVE-2024-37158LOWEvmos is missing precompile checksEPSS 0.4%CVE-2024-37154MEDIUMEvmos allows unvested token delegationsEPSS 0.4%CVE-2024-37159LOWEvmos is missing create validator checkEPSS 0.3%