https://vulnogram.org/ Most recent CVEs assigned by DFINITY Foundation (dfinity). https://vulnogram.org/seaview/icons/dfinity.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2024-11991 https://vulnogram.org/CVE-2024-11991 Motoko's incremental garbage collector is impacted by an uninitialized memory access bug, caused by incorrect use of write barriers in a few locations. This vulnerability could potentially allow unauthorized read or write access to a Canister's memor… Medium Network Exploitable Mon, 09 Dec 2024 14:38:07 GMT https://vulnogram.org/CVE-2024-7884 https://vulnogram.org/CVE-2024-7884 When a canister method is called via ic_cdk::call* , a new Future CallFuture is created and can be awaited by the caller to get the execution result. Internally, the state of the Future is tracked and stored in a struct called CallFutureState. A bug… High Network Exploitable Thu, 05 Sep 2024 13:01:20 GMT https://vulnogram.org/CVE-2024-4435 https://vulnogram.org/CVE-2024-4435 When storing unbounded types in a BTreeMap, a node is represented as a linked list of "memory chunks". It was discovered recently that when we deallocate a node, in some cases only the first memory chunk is deallocated, and the rest of the memory chu… Medium Network Exploitable Tue, 21 May 2024 09:41:35 GMT https://vulnogram.org/CVE-2024-1631 https://vulnogram.org/CVE-2024-1631 Impact: The library offers a function to generate an ed25519 key pair via Ed25519KeyIdentity.generate with an optional param to provide a 32 byte seed value, which will then be used as the secret key. When no seed value is provided, it is expected th… Critical Network Exploitable Wed, 21 Feb 2024 02:12:38 GMT https://vulnogram.org/CVE-2023-6245 https://vulnogram.org/CVE-2023-6245 The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is `record { * ; empty }` and the canister interface expects `record { * }` then the Rust candid decoder treat… High Network Exploitable Fri, 08 Dec 2023 14:26:09 GMT