{"cve":"CVE-2022-23066","nvd":{"published":"2022-05-09T07:15:08.330","modified":"2026-06-17T04:29:26.900","status":"Modified","description":"In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution path, resulting in huge loss in specific cases. For example, the result of a sdiv instruction may decide whether to transfer tokens or not. The vulnerability affects both integrity and may cause serious availability problems.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","score":9.1},"cwes":["CWE-682"],"references":["https://blocksecteam.medium.com/how-a-critical-bug-in-solana-network-was-detected-and-timely-patched-a701870e1324","https://github.com/solana-labs/rbpf/commit/e61e045f8c244de978401d186dcfd50838817297","https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23066","https://blocksecteam.medium.com/how-a-critical-bug-in-solana-network-was-detected-and-timely-patched-a701870e1324","https://github.com/solana-labs/rbpf/commit/e61e045f8c244de978401d186dcfd50838817297"],"products":["solana:rbpf"],"source":"nvd","synced_at":"2026-10-19T21:31:59.322382750+00:00"},"epss":{"cve":"CVE-2022-23066","score":0.02516,"percentile":0.84824,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-9qmm-4mfr-r3wj","url":"https://osv.dev/vulnerability/GHSA-9qmm-4mfr-r3wj","summary":"Incorrect Calculation in solana_rbpf","modified":"2023-11-08T04:08:16.094652Z","packages":[{"ecosystem":"crates.io","name":"solana_rbpf","purl":"pkg:cargo/solana_rbpf","ranges":[">=0.2.26 <0.2.28"],"fixed":["0.2.28"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}