CVE-2024-4435

Summary

CVE-2024-4435: A memory leak vulnerability was found in the BTreeMap data structure of the Dfinity stable-structures library. This issue occurs when deallocating a node, which results in some memory chunks being incorrectly retained. In extreme cases, an attacker could exploit this vulnerability by triggering interactions with the map, leading to excessive memory consumption or a denial-of-service condition. The issue has been resolved in version 0.6.4, with all affected users advised to upgrade. Unaffected users who do not store unbounded types in BTreeMaps do not need to upgrade.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.