Approved changes feed: RSS · Atom

cpe:2.3:a:solanalabs:rbpf:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSolanalabs (08a7a9b7-47d4-5309-8564-b86b4a94e24c)
ProductRbpf (b8272b76-04e7-55cf-b5b3-eadb595c4e65)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/solana-labs/rbpf purl2cpe 2026-06-01 10:12:41.646876

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-31264 vulnerable 2026-06-08 05:43:40.676349 Details available
Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program.
Published: 2022-05-21T20:04:50.000Z
Updated: 2024-08-03T07:11:39.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46102 vulnerable 2026-06-08 05:36:49.749056 Details available
From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly from ELF file without checking. If the sym.st_value is rather large, an integer overflow is triggered while calculating the variable "addr" via "addr = (sym.st_value + refd_pa) as u64";
Published: 2022-01-27T17:44:59.000Z
Updated: 2024-08-04T05:02:10.272Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.