VDB
Sign up
—

RUSTSEC-2024-0362

Stack overflow when parsing specially crafted JSON ABI strings

Details

Affected versions of the `alloy-json-abi` crate did not properly handle parsing of malformatted JSON ABI strings. The `JsonAbi::parse` method can be tricked into a stack overflow when processing specially crafted input.

This stack overflow can lead to a crash of the application using this crate, potentially causing a denial of service.

The flaw was corrected in commit 4790c47.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/alloy-json-abi
Introduced in: 0.0.0-0Fixed in: 0.7.7

Upgrade alloy-json-abi to 0.7.7 or newer (ecosystem crates.io).

References