CVEvulnerability

CVE-2023-26488

6.5 MEDIUM Published 2023-03-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-03-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-682

Description

OpenZeppelin Contracts is a library for secure smart contract development. The ERC721Consecutive contract designed for minting NFTs in batches does not update balances when a batch has size 1 and consists of a single token. Subsequent transfers from the receiver of that token may overflow the balance as reported by `balanceOf`. The issue exclusively presents with batches of size 1. The issue has been patched in 4.8.2.

Affected configurations

• openzeppelin contracts (>= 4.8.0 < 4.8.2) • openzeppelin contracts upgradeable (>= 4.8.0 < 4.8.2)

Related

Weakness · CWE (1)

  • CWE-682 Incorrect Calculation weakness

References