CVE-2020-24838

An integer overflow has been found in the the latest version of Issuer. The total issuedCount can be zero if the parameter is overly large. An attacker can obtain the private key of the owner issued with a certain 'amount', and the issuedCount can be zero if there is an overflow.

• CWE-190

• https://etherscan.io/address/0xecaad8df0dee0b9ed45ffd1191b024701f21506c#codePatch, Third Party Advisory
• https://etherscan.io/address/0xecaad8df0dee0b9ed45ffd1191b024701f21506c#codePatch, Third Party Advisory

Published

Feb 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24824A global buffer overflow issue in the dwarf::line_table::lin…5.5
• CVE-2020-24825A vulnerability in the line_table::line_table function of Li…5.5
• CVE-2020-24826A vulnerability in the elf::section::as_strtab function of L…5.5
• CVE-2020-24827A vulnerability in the dwarf::cursor::skip_form function of …5.5
• CVE-2020-24829An issue was discovered in GPAC from v0.5.2 to v0.8.0, as de…5.5
• CVE-2020-24837An integer underflow has been found in the latest version of…7.5
• CVE-2020-24841PNPSCADA 2.200816204020 allows SQL injection via parameter '…9.8
• CVE-2020-24842PNPSCADA 2.200816204020 allows cross-site scripting (XSS), w…6.1
• CVE-2020-24847A Cross-Site Request Forgery (CSRF) vulnerability is identif…4.3
• CVE-2020-24848FruityWifi through 2.4 has an unsafe Sudo configuration [(AL…7.8
• CVE-2020-24849A remote code execution vulnerability is identified in Fruit…8.8
• CVE-2020-24855Directory Traversal vulnerability in easywebpack-cli before …5.3