VULNERABILITY INTELLIGENCE

CVE-2020-24837

CVSS score7.5 HIGH
EPSS probability1.57%
CISA KEVNot currently listed
Published2021-02-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

An integer underflow has been found in the latest version of ZCFees. The variables 'currPeriodIdx' and 'lastPeriodExecIdx' are both unsigned integers, and the result of the minus operation may be a negative integer which leads to an underflow. The attackers can modify the current timestamp of the transaction somehow and block the execution of the process function.

Weakness classification

  • nvd@nist.gov: CWE-191

Primary references