CVE-2023-40014

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-40014
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40014.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-40014
Aliases
Downstream
Published
2023-08-10T19:52:55.699Z
Modified
2026-02-19T01:41:06.563266Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
OpenZeppelin Contracts's ERC2771Context with custom forwarder may lead to zero-valued _msgSender
Details

OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using ERC2771Context along with a custom trusted forwarder may see _msgSender return address(0) in calls that originate from the forwarder with calldata shorter than 20 bytes. This combination of circumstances does not appear to be common, in particular it is not the case for MinimalForwarder from OpenZeppelin Contracts, or any deployed forwarder the team is aware of, given that the signer address is appended to all calls that originate from these forwarders. The problem has been patched in v4.9.3.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-116"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40014.json"
}
References

Affected packages

Git
github.com/openzeppelin/openzeppelin-contracts

Affected ranges

Type
GIT
Repo
https://github.com/openzeppelin/openzeppelin-contracts
Events
Introduced
a673994de5eba4305cefb8ae98ea9ad37a43efaa
Fixed
fd81a96f01cc42ef1c9a5399364968d0e07e9e90
Database specific 
{
    "versions": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.9.3"
        }
    ]
}

Affected versions

v4.*
v4.0.0
v4.1.0
v4.1.0-rc.0
v4.2.0
v4.2.0-rc.0
v4.3.0
v4.3.0-rc.0
v4.3.1
v4.3.2
v4.4.0
v4.4.0-rc.0
v4.4.0-rc.1
v4.4.1
v4.8.0
v4.8.0-rc.0
v4.8.0-rc.1
v4.8.0-rc.2
v4.9.0
v4.9.0-rc.0
v4.9.0-rc.1
v4.9.1
v4.9.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40014.json"
github.com/openzeppelin/openzeppelin-contracts-upgradeable

Affected ranges

Type
GIT
Repo
https://github.com/openzeppelin/openzeppelin-contracts-upgradeable
Events
Introduced
7ebad27950c0b65fd046c43c3605d2347a1f96e2
Fixed
3d4c0d5741b131c231e558d7a6213392ab3672a5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40014.json"