ic-cdk vulnerabilities

1 known vulnerability in ic-cdk from Internet Computer. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ic-cdk: Missing Release of Memory after Effective Lifetime

  CVE-2024-7884Sep 5, 2024Internet Computer

  When a canister method is called via ic_cdk::call* , a new Future CallFuture is created and can be awaited by the caller to get the execution result. Internally, the state of the Future is tracked and stored in a struct called CallFutureState. A bug in the pol