CVE-2024-41945

Summary

CVE-2024-41945 is a vulnerability affecting the fuels-ts library, which is used for interacting with Fuel v2. The library's TypeScript SDK fails to recognize transactions funded with already used UTXOs, leading to unexpected behavior. Specifically, the `fund` function in `fuels-ts/packages/account/src/account.ts` retrieves required resources statelessly using `getResourcesToSpend`, disregarding previously utilized UTXOs. Consequently, transactions may not be included in the transaction pool or in blocks, or they may silently replace previous transactions in the pool.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.