cve.bz

CVE-2022-23066

9.1 criticalEPSS 2.5%

Critical (9.1) in solana rbpf. EPSS 2.5% chance of exploitation in the next 30 days. Fixed in solana_rbpf 0.2.28.

In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution path, resulting in huge loss in specific cases. For example, the result of a sdiv instruction may decide whether to transfer tokens or not. The vulnerability affects both integrity and may cause serious availability problems.

Severity

CVSS 3.1

9.1 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS
2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE
CWE-682
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-9qmm-4mfr-r3wjcrates.iosolana_rbpf>=0.2.26 <0.2.280.2.28

References

Check your stackJSON