CVE-2022-36008CWE-190

Message length overflow in frontier

High · published August 19, 2022

CVSS v3.1
7.1
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by RPC. In debug build, this would cause an overflow panic. No action is needed unless you have a bridge node that needs to distinguish different reversion exit reasons and you used RPC for this. There are currently no known workarounds.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01214 · 68.3th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2022-08-19T20:25Z
EPSS history
Timeline
  • 19 AUG 20:25Z
    Message length overflow in frontier
    cvelistv5