SKALE Network · Report #1546935
Stack Buffer Overflow via `gmp_sprintf`in `BLSSignature` and `BLSSigShare`
Validstatus
mediumseverity
$2,500bounty
23upvotes
7 Jul 2022disclosed
Summary
A security researcher identified a stack buffer overflow vulnerability in libBLS. While the risk was very low and nothing directly exploitable through the Network or Adjacent Network (the vulnerability requires local access to a machine and subsequent code changes to libBLS), the security team went ahead and made a quick change to mitigate this behavior. Because a change was made as a result of this report, the security team thanks @voiddy and awarded a bounty.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.