Dfinity: CVE Program partner

CVEs, 365 days05 all time, 0 rejected

Quality-median 99%

CVSS by the CNA-share of records

CWE-share of records

Affected versions-not n/a or unspecified

CVSS added by CISA-lower is better

Organisation	DFINITY Foundation
Role	CNA
Type	Vendor, Open Source
Reports to	mitre
Scope	All Internet Computer projects as found on the following GitHub pages: <a href='https://github.com/dfinity' target='_blank'>https://github.com/dfinity</a> and <a href='https://github.com/dfinity-lab' target='_blank'>https://github.com/dfinity-lab</a>.
Advisories	https://internetcomputer.org/security-advisories

CVE-2024-11991 2024-12-09 · CVSS 5.6
Motoko's incremental garbage collector is impacted by an uninitialized memory access bug, caused by incorrect use of write barriers in a few locations. This vul
CVE-2024-7884 2024-09-05 · CVSS 7.5
When a canister method is called via ic_cdk::call* , a new Future CallFuture is created and can be awaited by the caller to get the execution result. Internall
CVE-2024-4435 2024-05-21 · CVSS 5.9
When storing unbounded types in a BTreeMap, a node is represented as a linked list of "memory chunks". It was discovered recently that when we deallocate a node
CVE-2024-1631 2024-02-21 · CVSS 9.1
Impact: The library offers a function to generate an ed25519 key pair via Ed25519KeyIdentity.generate with an optional param to provide a 32 byte seed value, wh
CVE-2023-6245 2023-12-08 · CVSS 7.5
The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is `record { * ; e

Dfinity