CVE-2018-1000618

9.8 criticalEPSS 1.5%

EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in abi_serializer that can result in attack eos network node. This attack appear to be exploitable via network request. This vulnerability appears to have been fixed in after commit cf7209e703e6d3f7a5413e0cb1fe88a4d8e4b38d .

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-674
Published: 2018-07-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

eosio_project:eos

References

https://github.com/EOSIO/eos/pull/4112
https://github.com/EOSIO/eos/pull/4112

Check your stack JSON