CVE-2024-27094

Summary

CVE-2024-27094 is a vulnerability affecting OpenZeppelin Contracts, a popular library for secure smart contract development. The issue lies in the `Base64.encode` function, which encodes input in chunks of three bytes. However, when the input length is not a multiple of three, the last iteration may access memory beyond the intended input buffer. This vulnerability has been addressed in versions 5.0.2 and 4.9.6.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.