> CVE-2025-24800

« BACK_TO_HOME
PUBLISHED
2025-01-28 16:15
MODIFIED
2025-01-28 16:15
EPSS (Prob. Exploit)
0.32%
Top 76.7%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-11

> DESCRIPTION

Hyperbridge is a hyper-scalable coprocessor for verifiable, cross-chain interoperability. A critical vulnerability was discovered in the ismp-grandpa crate, that allowed a malicious prover easily convince the verifier of the finality of arbitrary headers. This could be used to steal funds or compromise other kinds of cross-chain applications. This vulnerability is fixed in 15.0.1.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-wwx5-gpgr-vxr7 CRITICAL

ismp-grandpa crate accepted incorrect signatures

AFFECTED PACKAGES:
RUST / grandpa-verifier
< 0.1.2
Fixed in: 0.1.2
RUST / grandpa-verifier-primitives
< 0.1.2
Fixed in: 0.1.2
RUST / ismp-grandpa
< 15.0.1
Fixed in: 15.0.1

> HISTORIQUE DES MODIFICATIONS

Première apparition
28/01/2025 16:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:00
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME