CVE-2020-24838

Published Feb 10, 2021 CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Description
An integer overflow has been found in the the latest version of Issuer. The total issuedCount can be zero if the parameter is overly large. An attacker can obtain the private key of the owner issued with a certain 'amount', and the issuedCount can be zero if there is an overflow.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-17547 An integer overflow has been found in the the latest version of Issuer. The total issuedCount can be zero if the parameter is overly large. An attacker can obtain the private key of the owner issued with a certain 'amount', and the issuedCount can be zero if there is an overflow.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 4, 2024, 3:19 PM
Reserved
Aug 28, 2020, 12:00 AM
Status
Modified
Published
Feb 10, 2021, 4:15 PM
Modified
Jun 17, 2026, 3:06 AM