CVE-2020-24838

Published: Feb 10, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An integer overflow has been found in the the latest version of Issuer. The total issuedCount can be zero if the parameter is overly large. An attacker can obtain the private key of the owner issued with a certain 'amount', and the issuedCount can be zero if there is an overflow.

Affected (1)

Products: Issuer Project: Issuer

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Issuer Project Issuer	All versions

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

https://etherscan.io/address/0xecaad8df0dee0b9ed45ffd1191b024701f21506c#code

Source: cve@mitre.org

PatchThird Party Advisory

https://etherscan.io/address/0xecaad8df0dee0b9ed45ffd1191b024701f21506c#code

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.