Read the docs

Internet Computer

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Internet Computer records in CISA KEV

No Internet Computer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Candid 1 record MEDIUM Canister Developer Kit For The Internet Computer 1 record MEDIUM Icp-js-core 1 record MEDIUM Motoko 1 record LOW Stable Structures 1 record LOW

Records

1 record in Candid · all components

TI-2023-05736 CVE-2023-6245 · GHSA-7787-p7x6-fq3j

Infinite decoding loop through specially crafted payload

Priority MEDIUM 41

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01212 Published 2023-12-08 Fixed in 0.9.10 CWE-1288
Open these records in search →