Vulnerabilities > CVE-2023-26488 - Unspecified vulnerability in Openzeppelin Contracts and Contracts Upgradeable

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
openzeppelin
NVD
Published: 2023-03-03
Updated: 2024-11-21

Summary

OpenZeppelin Contracts is a library for secure smart contract development. The ERC721Consecutive contract designed for minting NFTs in batches does not update balances when a batch has size 1 and consists of a single token. Subsequent transfers from the receiver of that token may overflow the balance as reported by `balanceOf`. The issue exclusively presents with batches of size 1. The issue has been patched in 4.8.2.

Vulnerable Configurations

Part Description Count
Application
Openzeppelin
10

References