Anyone who uses elrond-go to process blocks (historical or actual) that contains a transaction like this: MultiESDTNFTTransfer@01@54444558544b4b5955532d323631626138@00@0793afc18c8da2ca@
(mind the missing function name after the last @
)
Basic functionality like p2p messaging, storage, API requests and such are unaffected.
Patch v1.3.34 or higher
No workarounds
For future reference, one can observe the following integration test: [provide the link to the integration test]
If you have any questions or comments about this advisory: * Open an issue in elrond-go (http://github.com/ElrondNetwork/elrond-go/issues)
{ "nvd_published_at": "2022-09-06T20:15:00Z", "github_reviewed_at": "2022-09-01T22:24:26Z", "severity": "HIGH", "github_reviewed": true, "cwe_ids": [ "CWE-20" ] }