PatchTheCVECVEs published by DFINITY Foundation
CVEs published by DFINITY Foundation (CVE Numbering Authority). 2 tracked.
- CVE-2024-7884 HIGH 7.5 UPGRADE When a canister method is called via ic_cdk::call* , a new Future CallFuture is created and can be awaited by
- CVE-2024-11991 MEDIUM 5.6 UPGRADE Motoko's incremental garbage collector is impacted by an uninitialized memory access bug, caused by incorrect