CVE-2019-16762

Published: Nov 15, 2019Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H

Exploitability: 0.9 / Impact: 5.2

Source: NVD

Description

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. Affected users can upgrade to any version >= 0.21.4.

Affected (1)

Products: Simpleledger: Slpjs

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Simpleledger Slpjs	Before 0.21.4

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://github.com/simpleledger/slpjs/commit/ac8809b42e47790a6f0205991b36f2699ed10c84#diff-fe58606994c412ba56a65141a7aa4a62L701

Source: security-advisories@github.com

PatchThird Party Advisory

https://github.com/simpleledger/slpjs/security/advisories/GHSA-425c-ccf3-3jrr

Source: security-advisories@github.com

ExploitPatchThird Party Advisory

https://github.com/simpleledger/slpjs/commit/ac8809b42e47790a6f0205991b36f2699ed10c84#diff-fe58606994c412ba56a65141a7aa4a62L701

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/simpleledger/slpjs/security/advisories/GHSA-425c-ccf3-3jrr

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party Advisory

Timeline

No history available yet.