CVE-2025-29072 | BDVDB-2026-271949 Detail

Description#

An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop (and high CPU usage) by submitting a malicious Declare v2/v3 transaction. This results in a denial-of-service condition for affected Starknet full-node implementations.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-03-27Record published in the CVE List.
2. Version 22025-03-28Most recent update recorded in the CVE List.