Parity vulnerabilities

Products

• Frontier 8
• Libsecp256k1 3

Newest

• parity frontier Frontier opcode SUICIDE touches too many storage values on large contracts CVE-2023-45130 7.5 HighOctober 13, 2023
• paritytech ink, parity ink\! +1 more ink! vulnerable to incorrect decoding of storage value when using `DelegateCall` CVE-2023-34449 Fix available 5.3 MediumJune 14, 2023
• parity frontier Frontier's modexp precompile is slow for even modulus CVE-2023-28431 7.5 HighMarch 21, 2023
• parity frontier Incorrect Calculation in Frontier leads to inflated Ethereum chain gas prices CVE-2022-39242 5.3 MediumSeptember 23, 2022
• parity frontier Message length overflow in frontier CVE-2022-36008 7.1 HighAugust 18, 2022
• parity frontier Discrepency in transfer value and actual value due to incorrect truncation in Frontier CVE-2022-31111 5.3 MediumJuly 6, 2022
• parity frontier Integer underflow in Frontier CVE-2022-21685 6.5 MediumJanuary 14, 2022
• parity frontier Validity check for signed Frontier-specific extrinsic not called in block execution CVE-2021-41138 5.3 MediumOctober 13, 2021
• parity frontier Transaction validity oversight in pallet-ethereum CVE-2021-39193 5.3 MediumSeptember 1, 2021
• parity libsecp256k1 Overflow in libsecp256k1 CVE-2021-38195 Fix available 9.8 CriticalJuly 13, 2021
• parity libsecp256k1 Observable Discrepancy in libsecp256k1-rs CVE-2019-20399 Fix available 5.9 MediumJanuary 22, 2020
• parity libsecp256k1 libsecp256k1 contains side-channel timing attack CVE-2019-25003 Fix available 7.5 HighOctober 14, 2019
• parity ethereum client, talos parity +1 more An exploitable overly permissive cross-domain (CORS) whitelist vulnerability exists in JSON-RPC... CVE-2017-14460 7.5 HighJanuary 19, 2018
• parity browser Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and... CVE-2017-18016 Public exploit 5.3 MediumJanuary 11, 2018