CVE Database
/

CVE-2017-14451

Back to search

CVE-2017-14451

Published: Dec 2, 2020

Modified: Aug 5, 2024

PUBLISHED

Description

An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send malicious smart contract to trigger this vulnerability.

VendorProductVersions

n/a

CPP-Ethereum

affected
Ethereum commit 4e1015743b95821849d001618a7ce82c7c073768

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now