CVE-2024-51426 Business logic in n/a
Remote attackers can exploit the _transfer function in the PepeGxng smart contract, though the specific impact is disputed and limited to function calls.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-51426?
CVE-2024-51426 is a high-severity vulnerability in n/a, published on 30 Oct 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact via the _transfer function. NOTE: this is disputed by third parties because the impact is limited to function calls.
Weakness: CWE-863
Which versions are affected by CVE-2024-51426?
How do I fix CVE-2024-51426?
No fix has been published for CVE-2024-51426 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-51426 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-51426 exists.
Sources
Also known as GHSA-xhx7-6233-wm3w.