GHSA-773q-5334-5gf9
Memory over-allocation in evm-core
Prior to the patch, when executing specific EVM opcodes related
to memory operations that use evm_core::Memory::copy_large, the
crate can over-allocate memory when it is not needed, making it
possible for an attacker to perform denial-of-service attack.
The flaw was corrected in commit 19ade85.
What each source reports
GitHub AdvisoriesNo score
Memory over-allocation in evm-core
Prior to the patch, when executing specific EVM opcodes related
to memory operations that use evm_core::Memory::copy_large, the
crate can over-allocate memory when it is not needed, making it
possible for an attacker to perform denial-of-service attack.
The flaw was corrected in commit 19ade85.
- Record
GHSA-773q-5334-5gf9- Weakness
- CWE-789
- Updated
- 2026-11-02
OSVNo score
Memory over-allocation in evm-core
Prior to the patch, when executing specific EVM opcodes related
to memory operations that use evm_core::Memory::copy_large, the
crate can over-allocate memory when it is not needed, making it
possible for an attacker to perform denial-of-service attack.
The flaw was corrected in commit 19ade85.
- Record
GHSA-773q-5334-5gf9- Weakness
- CWE-789
- Updated
- 2026-11-02
OSVRUSTSEC-2021-0066No score
Denial of service on EVM execution due to memory over-allocation
Prior to the patch, when executing specific EVM opcodes related
to memory operations that use evm_core::Memory::copy_large, the
crate can over-allocate memory when it is not needed, making it
possible for an attacker to perform denial-of-service attack.
The flaw was corrected in commit 19ade85.
- Record
RUSTSEC-2021-0066- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
evm-corecrates.io | 0.26.0 up to 0.26.1 | 0.26.1 |
evm-corecrates.io | 0.25.0 up to 0.25.1 | 0.25.1 |
evm-corecrates.io | 0.24.0 up to 0.24.1 | 0.24.1 |
evm-corecrates.io | 0.23.0 up to 0.23.1 | 0.23.1 |
evm-corecrates.io | before 0.21.1 | 0.21.1 |
evm-corecrates.io | 0.0.0-0 up to 0.21.1, 0.22.0-0 up to 0.23.1, 0.24.0-0 up to 0.24.1, 0.25.0-0 up to 0.25.1, 0.26.0-0 up to 0.26.1 | 0.21.10.23.10.24.10.25.10.26.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-773q-5334-5gf9 is a vulnerability with no CVSS score yet in evm-core, published May 11, 2021. No source lists public exploit code. Fixed in evm-core 0.26.1.