Internet Computer vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20244

Newest CVEs

• CVE-2024-11991

  Uninitialized memory access in Motoko incremental garbage collector

  Internet Computer · Motoko

  Medium5.6
• CVE-2024-7884

  Memory leak when calling a canister method via `ic_cdk::call`

  Internet Computer · ic-cdk

  High7.5
• CVE-2024-4435

  BTreeMap memory leak when deallocating nodes with overflows

  Internet Computer · ic-stable-structures

  Medium5.9
• CVE-2024-1631

  agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`

  Internet Computer · agent-js

  Critical9.1
• CVE-2023-6245

  Infinite decoding loop through specially crafted payload

  Internet Computer · Candid

  High7.5