CVE-2022-21685

Frontier is Substrate's Ethereum compatibility layer. Prior to commit number `8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664`, a bug in Frontier's MODEXP precompile implementation can cause an integer underflow in certain conditions. This will cause a node crash for debug builds. For release builds (and production WebAssembly binaries), the impact is limited as it can only cause a normal EVM out-of-gas. Users who do not use MODEXP precompile in their runtime are not impacted. A patch is available in pull request #549.

• CWE-191
• CWE-191

• https://github.com/paritytech/frontier/commit/8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664Patch, Third Party Advisory
• https://github.com/paritytech/frontier/pull/549Patch, Third Party Advisory
• https://github.com/paritytech/frontier/security/advisories/GHSA-cjg2-2fjg-fph4Patch, Third Party Advisory
• https://github.com/paritytech/frontier/commit/8a93fdc6c9f4eb1d2f2a11b7ff1d12d70bf5a664Patch, Third Party Advisory
• https://github.com/paritytech/frontier/pull/549Patch, Third Party Advisory
• https://github.com/paritytech/frontier/security/advisories/GHSA-cjg2-2fjg-fph4Patch, Third Party Advisory

Published

Jan 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2168The Download Manager WordPress plugin before 3.2.44 does not…6.1
• CVE-2022-21680Marked is a markdown parser and compiler. Prior to version 4…7.5
• CVE-2022-21681Marked is a markdown parser and compiler. Prior to version 4…7.5
• CVE-2022-21682Flatpak is a Linux application sandboxing and distribution f…6.5
• CVE-2022-21683Wagtail is a Django based content management system focused …4.3
• CVE-2022-21684Discourse is an open source discussion platform. Versions pr…8.8
• CVE-2022-21686PrestaShop is an Open Source e-commerce platform. Starting w…9.8
• CVE-2022-21687gh-ost is a triggerless online schema migration solution for…6.5
• CVE-2022-21688OnionShare is an open source tool that lets you securely and…5.5
• CVE-2022-21689OnionShare is an open source tool that lets you securely and…7.5
• CVE-2022-2169The Loading Page with Loading Screen WordPress plugin before…4.8
• CVE-2022-21690OnionShare is an open source tool that lets you securely and…5.4