HexBrain

SKALE Network · Report #1546935

Stack Buffer Overflow via `gmp_sprintf`in `BLSSignature` and `BLSSigShare`

Validstatus
mediumseverity
$2,500bounty
23upvotes
7 Jul 2022disclosed

Summary

A security researcher identified a stack buffer overflow vulnerability in libBLS. While the risk was very low and nothing directly exploitable through the Network or Adjacent Network (the vulnerability requires local access to a machine and subsequent code changes to libBLS), the security team went ahead and made a quick change to mitigate this behavior. Because a change was made as a result of this report, the security team thanks @voiddy and awarded a bounty.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original