solana_rbpf
Activity
- Latest release
- 2y ago
- Total releases
- 89
- Cadence
- ~17 days
- Last 12 months
- 0
Details
- License
- Apache-2.0
- First release
- Oct 30, 2018
| Version | Released | |
|---|---|---|
0.8.5
unknown
1 CVE
RUSTSEC-2026-0191
May 28, 2026
`EbpfVm::invoke_function` performs out-of-bounds pointer arithmetic Affected versions of The resulting pointer arithmetic is performed with UnmaintainedThe upstream Users should migrate to the maintained References Updated Jun 29, 2026 · Source: OSV.dev |
0.8.5
unknown
Dependencies (15)
+ 7 more |
|
0.8.4
unknown
1 CVE
RUSTSEC-2026-0191
May 28, 2026
`EbpfVm::invoke_function` performs out-of-bounds pointer arithmetic Affected versions of The resulting pointer arithmetic is performed with UnmaintainedThe upstream Users should migrate to the maintained References Updated Jun 29, 2026 · Source: OSV.dev |
0.8.4
unknown
Dependencies (15)
+ 7 more |
|
0.8.3
unknown
1 CVE
RUSTSEC-2026-0191
May 28, 2026
`EbpfVm::invoke_function` performs out-of-bounds pointer arithmetic Affected versions of The resulting pointer arithmetic is performed with UnmaintainedThe upstream Users should migrate to the maintained References Updated Jun 29, 2026 · Source: OSV.dev |
0.8.3
unknown
Dependencies (15)
+ 7 more |
|
0.8.2
unknown
yanked
1 CVE
RUSTSEC-2026-0191
May 28, 2026
`EbpfVm::invoke_function` performs out-of-bounds pointer arithmetic Affected versions of The resulting pointer arithmetic is performed with UnmaintainedThe upstream Users should migrate to the maintained References Updated Jun 29, 2026 · Source: OSV.dev |
0.8.2
unknown
yanked
Dependencies (15)
+ 7 more |
|
0.8.1
unknown
yanked
1 CVE
RUSTSEC-2026-0191
May 28, 2026
`EbpfVm::invoke_function` performs out-of-bounds pointer arithmetic Affected versions of The resulting pointer arithmetic is performed with UnmaintainedThe upstream Users should migrate to the maintained References Updated Jun 29, 2026 · Source: OSV.dev |
0.8.1
unknown
yanked
Dependencies (15)
+ 7 more |
|
0.8.0
unknown
yanked
1 CVE
RUSTSEC-2026-0191
May 28, 2026
`EbpfVm::invoke_function` performs out-of-bounds pointer arithmetic Affected versions of The resulting pointer arithmetic is performed with UnmaintainedThe upstream Users should migrate to the maintained References Updated Jun 29, 2026 · Source: OSV.dev |
0.8.0
unknown
yanked
Dependencies (15)
+ 7 more |
|
0.7.2
unknown
|
0.7.2
unknown
Dependencies (15)
+ 7 more |
|
0.6.1
unknown
|
0.6.1
unknown
Dependencies (15)
+ 7 more |
|
0.7.1
unknown
|
0.7.1
unknown
Dependencies (15)
+ 7 more |
|
0.7.0
unknown
|
0.7.0
unknown
Dependencies (15)
+ 7 more |
|
0.6.0
unknown
|
0.6.0
unknown
Dependencies (15)
+ 7 more |
|
0.5.0
unknown
|
0.5.0
unknown
Dependencies (15)
+ 7 more |
|
0.4.0
unknown
|
0.4.0
unknown
Dependencies (15)
+ 7 more |
|
0.3.0
unknown
|
0.3.0
unknown
Dependencies (15)
+ 7 more |
|
0.2.40
unknown
|
0.2.40
unknown
Dependencies (15)
+ 7 more |
|
0.2.39
unknown
|
0.2.39
unknown
Dependencies (15)
+ 7 more |
|
0.2.38
unknown
|
0.2.38
unknown
Dependencies (15)
+ 7 more |
|
0.2.37
unknown
|
0.2.37
unknown
Dependencies (14)
+ 6 more |
|
0.2.36
unknown
|
0.2.36
unknown
Dependencies (14)
+ 6 more |
|
0.2.35
unknown
|
0.2.35
unknown
Dependencies (14)
+ 6 more |
|
0.2.34
unknown
|
0.2.34
unknown
Dependencies (14)
+ 6 more |
|
0.2.33
unknown
|
0.2.33
unknown
Dependencies (14)
+ 6 more |
|
0.2.32
unknown
|
0.2.32
unknown
Dependencies (13)
+ 5 more |
|
0.2.31
unknown
|
0.2.31
unknown
Dependencies (13)
+ 5 more |
|
0.2.30
unknown
|
0.2.30
unknown
Dependencies (13)
+ 5 more |
|
0.2.29
unknown
|
0.2.29
unknown
Dependencies (13)
+ 5 more |
|
0.2.28
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.28
unknown
Dependencies (13)
+ 5 more |
|
0.2.27
unknown
2 CVEs
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2022-23066
GHSA-9qmm-4mfr-r3wj
May 10, 2022
Incorrect Calculation in solana_rbpf
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution path, resulting in huge loss in specific cases. For example, the result of a sdiv instruction may decide whether to transfer tokens or not. The vulnerability affects both integrity and may cause serious availability problems. Fixed in
0.2.28
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.27
unknown
Dependencies (13)
+ 5 more |
|
0.2.26
unknown
2 CVEs
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2022-23066
GHSA-9qmm-4mfr-r3wj
May 10, 2022
Incorrect Calculation in solana_rbpf
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution path, resulting in huge loss in specific cases. For example, the result of a sdiv instruction may decide whether to transfer tokens or not. The vulnerability affects both integrity and may cause serious availability problems. Fixed in
0.2.28
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.26
unknown
Dependencies (12)
+ 4 more |
|
0.2.25
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.25
unknown
Dependencies (12)
+ 4 more |
|
0.2.24
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.24
unknown
Dependencies (13)
+ 5 more |
|
0.2.23
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.23
unknown
Dependencies (13)
+ 5 more |
|
0.2.22
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.22
unknown
Dependencies (13)
+ 5 more |
|
0.2.21
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.21
unknown
Dependencies (13)
+ 5 more |
|
0.2.20
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.20
unknown
Dependencies (13)
+ 5 more |
|
0.2.19
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.19
unknown
Dependencies (13)
+ 5 more |
|
0.2.18
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.18
unknown
Dependencies (13)
+ 5 more |
|
0.2.17
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.17
unknown
Dependencies (13)
+ 5 more |
|
0.2.16
unknown
2 CVEs
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2021-46102
GHSA-xwqr-xmgg-j69q
Jan 28, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly from ELF file without checking. If the sym.st_value is rather large, an integer overflow is triggered while calculating the variable "addr" via Fixed in
0.2.17
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.16
unknown
Dependencies (13)
+ 5 more |
|
0.2.15
unknown
2 CVEs
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2021-46102
GHSA-xwqr-xmgg-j69q
Jan 28, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly from ELF file without checking. If the sym.st_value is rather large, an integer overflow is triggered while calculating the variable "addr" via Fixed in
0.2.17
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.15
unknown
Dependencies (14)
+ 6 more |
|
0.2.14
unknown
2 CVEs
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2021-46102
GHSA-xwqr-xmgg-j69q
Jan 28, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly from ELF file without checking. If the sym.st_value is rather large, an integer overflow is triggered while calculating the variable "addr" via Fixed in
0.2.17
References
Updated Nov 08, 2023 · Source: OSV.dev |
0.2.14
unknown
Dependencies (13)
+ 5 more |
|
0.2.13
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.13
unknown
Dependencies (13)
+ 5 more |
|
0.2.12
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.12
unknown
Dependencies (13)
+ 5 more |
|
0.2.11
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.11
unknown
Dependencies (13)
+ 5 more |
|
0.2.10
unknown
yanked
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.10
unknown
yanked
Dependencies (13)
+ 5 more |
|
0.2.9
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.9
unknown
Dependencies (12)
+ 4 more |
|
0.2.8
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.8
unknown
Dependencies (12)
+ 4 more |
|
0.2.7
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.7
unknown
Dependencies (12)
+ 4 more |
|
0.2.6
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.6
unknown
Dependencies (12)
+ 4 more |
|
0.2.5
unknown
1 CVE
CVE-2022-31264
GHSA-ffx3-8qvm-pq3j
May 22, 2022
Integer overflow in solana_rbpf
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program. Fixed in
0.2.29
References Updated Nov 08, 2023 · Source: OSV.dev |
0.2.5
unknown
Dependencies (12)
+ 4 more |