CVE-2025-29776

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-29776
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-29776.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-29776
Aliases
Published
2025-03-14T14:15:18Z
Modified
2025-05-24T03:40:43.610180Z
Summary
[none]
Details

Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling setTimer in Azle versions 0.27.0, 0.28.0, and 0.29.0 causes an immediate infinite loop of timers to be executed on the canister, each timer attempting to clean up the global state of the previous timer. The infinite loop will occur with any valid invocation of setTimer. The problem has been fixed as of Azle version 0.30.0. As a workaround, if a canister is caught in this infinite loop after calling setTimer, the canister can be upgraded and the timers will all be cleared, thus ending the loop.

References

Affected packages

Git / github.com/demergent-labs/azle

Affected ranges

Type
GIT
Repo
https://github.com/demergent-labs/azle
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b1a14d97318aeae762f385877043bda065ce143c

Affected versions

0.*

0.1.0
0.1.0-rc.0
0.1.0-rc.13
0.1.0-rc.14
0.1.0-rc.15
0.1.0-rc.16
0.1.0-rc.17
0.10.0
0.11.0
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
0.15.0
0.16.0
0.16.1
0.16.2
0.16.3
0.17.0
0.17.1
0.18.0
0.18.1
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.19.0
0.2.0-rc.0
0.2.2
0.20.0
0.20.1
0.20.2
0.20.2-rc.0
0.21.0
0.21.1
0.22.0
0.23.0
0.24.0
0.24.1
0.24.2-rc.97
0.25.0
0.25.0-rc.1
0.25.0-rc.10
0.25.0-rc.11
0.25.0-rc.12
0.25.0-rc.13
0.25.0-rc.14
0.25.0-rc.15
0.25.0-rc.2
0.25.0-rc.5
0.25.0-rc.6
0.25.0-rc.7
0.25.0-rc.9
0.26.0
0.26.0-rc.0
0.26.0-rc.1
0.26.0-rc.2
0.26.0-rc.3
0.26.0-rc.4
0.26.0-rc.5
0.26.0-rc.6
0.26.0-rc.7
0.26.1-rc.0
0.27.0
0.27.0-rc.0
0.28.0
0.28.0-rc.0
0.28.0-rc.1
0.28.1-rc.0
0.29.0
0.29.0-rc.0
0.3.0
0.3.0-rc.3
0.3.0-rc.5
0.3.0-rc.6
0.3.1
0.3.1-rc.0
0.3.1-rc.2
0.3.1-rc.24
0.3.1-rc.35
0.3.1-rc.36
0.3.1-rc.37
0.3.1-rc.38
0.3.1-rc.41
0.3.1-rc.42
0.3.1-rc.43
0.3.1-rc.44
0.3.1-rc.45
0.3.1-rc.46
0.3.1-rc.8
0.3.1-rc.9
0.30.0-rc.0
0.4.0
0.4.0-rc.3
0.5.0
0.6.0
0.7.0
0.7.0-rc.2
0.7.0-rc.3
0.8.0
0.9.0
0.9.0-rc.0

v0.*

v0.0.1
v0.0.10
v0.0.11
v0.0.12
v0.0.13
v0.0.14
v0.0.2
v0.0.3
v0.0.4
v0.0.5
v0.0.6
v0.0.7
v0.0.8
v0.0.9