CVE-2020-24837 | BDVDB-2026-148917 Detail

Description#

An integer underflow has been found in the latest version of ZCFees. The variables 'currPeriodIdx' and 'lastPeriodExecIdx' are both unsigned integers, and the result of the minus operation may be a negative integer which leads to an underflow. The attackers can modify the current timestamp of the transaction somehow and block the execution of the process function.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://etherscan.io/address/0x9d79c6e2a0222b9ac7bfabc447209c58fe9e0dcc#code

Exploit#

No public exploit known

History#

Version 12021-02-10Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.