Incorrect Calculation in solana_rbpf
Critical severity
GitHub Reviewed
Published
May 10, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
May 9, 2022
Published to the GitHub Advisory Database
May 10, 2022
Reviewed
May 24, 2022
Last updated
Jan 27, 2023
In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution path, resulting in huge loss in specific cases. For example, the result of a sdiv instruction may decide whether to transfer tokens or not. The vulnerability affects both integrity and may cause serious availability problems.
References