地图 / sign_multisig crashes monero-wallet-rpc on a malformed but decryptable multisig txset

sign_multisig crashes monero-wallet-rpc on a malformed but decryptable multisig txset

密码学缺陷 / Unlabeled / #3683934

厂商: Monero
严重程度: 中危
赏金: —
弱点: Unlabeled
研究员: @helping_bro
披露日期: 2026-09-17
资产: —
CVE: —

该报告还没有中文解读。

时间线

2026-04-19报告提交
2026-09-17公开披露

阅读 HackerOne 原文 ↗作者 @helping_bro · 版权归作者与 Monero 所有

同类报告

WannaCrypt “Killswitch”HackerOne · 2017-05-13 [Java] CWE-326: Query to detect weak encryption with an insufficient key sizeGitHub Security Lab · — · $4,500 Use of Cryptographically Weak Pseudo-Random Number Generator in WebCrypto keygenInternet Bug Bounty · 2023-04-09 · $4,000 Exposed Unencrypted Telnet EndpointStarbucks · 2017-02-08 Android app does not clear end to end encryption keysNextcloud · 2021-06-16 · $100 End to end encryption public key is not properly verified on Desktop and AndroidNextcloud · 2021-09-23 · $1,500