Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-36058

elrond-go MultiESDTNFTTransfer call on a SC address with missing function name

Description

Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.34, anyone who uses elrond-go to process blocks (historical or actual) could encounter a `MultiESDTNFTTransfer` transaction like this: `MultiESDTNFTTransfer` with a missing function name. Basic functionality like p2p messaging, storage, API requests and such are unaffected. Version 1.3.34 contains a fix for this issue. There are no known workarounds.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ElrondNetwork elrond-go

  • <= 1.3.33affected

References