← CVE Intelligence

CVE-2024-38533

ZKsync Era invalid stack addressing conversion PUBLISHED

Description (CNA)

ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has been patched in version 1.5.0.

Affected (CNA)

Vendor / productVersions
matter-labs / era-compiler-vyperaffected < 1.5.0

CWE

CWE-787

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.