synced 8 MIN AGO
01 Record

CVE-2024-30253

Handling untrusted input can result in a crash, leading to loss of availability / denial of service

HighPUBLISHEDCNA: GitHub_M
CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
View raw JSON

02 Description

Handling untrusted input can result in a crash, leading to loss of availability / denial of service

03 Exploitation and scoring

Exploitation
Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
SSVC decision
  • ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
  • AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
  • Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.
CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.
EPSS probability
0.59% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 48.1% of scored records. A rank, not a probability.
NVD base score
7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD analysis status
Deferred. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2024-04-17 15:07Z2 YR AGO
Last updated
2024-08-21 15:05Z2 YR AGO
Reserved
2024-03-26
Assigning CNA
GitHub_M
Record state
PUBLISHED
Severity
High (CVSS 7.5)
CNA CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
  • CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass
Data version
5.1
Document digest
7044e11c732a11b3d7809402ca793724f8556eb8984b9cdf52186e693efeef11

05 Affected products

VendorProductVersionsPlatforms
solana-labssolana-web3.js>= 1.91.0, < 1.91.3, >= 1.90, < 1.90.2, >= 1.89, < 1.89.2, = 1.88.0, >=1.87.0, < 1.87.7, = 1.86.0, = 1.85.0, = 1.84.0, = 1.83.0, = 1.82.0, = 1.81.0, = 1.80.0, = 1.79.0, >= 1.78, < 1.78.8, >= 1.77, < 1.77.4, = 1.76.0, = 1.75.0, = 1.74.0, >= 1.73.0, < 1.73.5, = 1.72.0, = 1.71.0, >= 1.70.0, < 1.70.4, = 1.69.0, >= 1.68.0, < 1.68.2, >= 1.67.0, < 1.67.3, >= 1.66.0, < 1.66.6, = 1.65.0, = 1.64.0, >= 1.63.0, < 1.63.2, >= 1.62.0, < 1.62.2, >= 1.61.0, < 1.61.2, = 1.60.0, >= 1.59.0, < 1.59.2, = 1.58.0, = 1.57.0, >= 1.56.0, < 1.56.3, = 1.55.0, >= 1.54.0, < 1.54.2, = 1.53.0, = 1.52.0, = 1.51.0, >= 1.50.0, < 1.50.2, = 1.49.0, = 1.48.0, >= 1.47.0, < 1.47.5, = 1.46.0, = 1.45.0, >= 1.44.0, < 1.44.4, >= 1.43.0, < 1.43.7, = 1.42.0, >= 1.41.0, < 1.41.11, >= 1.40.0, < 1.40.2, >= 1.39.0, < 1.39.2, = 1.38.0, >= 1.37.0, < 1.37.3, = 1.36.0, >= 1.35.0, < 1.35.2, = 1.34.0, = 1.33.0, >= 1.32.0, < 1.32.2, = 1.31.0, >= 1.30.0, < 1.30.3, >= 1.29.0, < 1.29.4, = 1.28.0, = 1.27.0, = 1.26.0, = 1.25.0, >= 1.24.0, < 1.24.3, = 1.23.0, = 1.22.0, = 1.21.0, >= 1.20.0, < 1.20.3, = 1.19.0, = 1.18.0, = 1.17.0, >= 1.16.0, < 1.16.2, = 1.15.0, = 1.14.0, = 1.13.0, = 1.12.0, = 1.11.0, >= 1.10.0, < 1.10.2, >= 1.9.0, < 1.9.2, = 1.8.0, >= 1.7.0, < 1.7.2, = 1.6.0, = 1.5.0, = 1.4.0, = 1.3.0, >= 1.2.0, < 1.2.8, >= 1.1.0, < 1.1.2, < 1.0.1—
solanalabsweb31.91.0 to < 1.91.3, 1.90 to < 1.90.2, 1.89 to < 1.89.2, 1.88.0, 1.87.0 to < 1.87.7, 1.86.0, 1.85.0, 1.84.0, 1.83.0, 1.82.0, 1.81.0, 1.80.0, 1.79.0, 1.78 to < 1.78.8, 1.77 to < 1.77.4, 1.76.0, 1.75.0, 1.74.0, 1.73.0 to < 1.73.5, 1.72.0, 1.71.0, 1.70.0 to < 1.70.4, 1.69.0, 1.68.0 to < 1.68.2, 1.67.0 to < 1.67.3, 1.66.0 to < 1.66.6, 1.65.0, 1.64.0, 1.63.0 to < 1.63.2, 1.62.0 to < 1.62.2, 1.61.0 to < 1.61.2, 1.60.0, 1.59.0 to < 1.59.2, 1.58.0, 1.57.0, 1.56.0 to < 1.56.3, 1.55.0, 1.54.0 to < 1.54.2, 1.53.0, 1.52.0, 1.51.0, 1.50.0 to < 1.50.2, 1.49.0, 1.48.0, 1.47.0 to < 1.47.5, 1.46.0, 1.45.0, 1.44.0 to < 1.44.4, 1.43.0 to < 1.43.7, 1.42.0, 1.41.0 to < 1.41.11, 1.40.0 to < 1.40.2, 1.39.0 to < 1.39.2, 1.38.0, 1.37.0 to < 1.37.3, 1.36.0, 1.35.0 to < 1.35.2, 1.34.0, 1.33.0, 1.32.0 to < 1.32.2, 1.31.0, 1.30.0 to < 1.30.3, 1.29.0 to < 1.29.4, 1.28.0, 1.27.0, 1.26.0, 1.25.0, 1.24.0 to < 1.24.3, 1.23.0, 1.22.0, 1.21.0, 1.20.0 to < 1.20.3, 1.19.0, 1.18.0, 1.17.0, 1.16.0 to < 1.16.2, 1.15.0, 1.14.0, 1.13.0, 1.12.0, 1.11.0, 1.10.0 to < 1.10.2, 1.9.0 to < 1.9.2, 1.8.0, 1.7.0 to < 1.7.2, 1.6.0, 1.5.0, 1.4.0, 1.3.0, 1.2.0 to < 1.2.8, 1.1.0 to < 1.1.2, 0 to < 1.0.1—

06 References