CVE-2025-24800
ismp-grandpa <15.0.1 - RCE
Title source: llmDescription
Hyperbridge is a hyper-scalable coprocessor for verifiable, cross-chain interoperability. A critical vulnerability was discovered in the ismp-grandpa crate, that allowed a malicious prover easily convince the verifier of the finality of arbitrary headers. This could be used to steal funds or compromise other kinds of cross-chain applications. This vulnerability is fixed in 15.0.1.
References (3)
Scores
EPSS
0.0008
EPSS Percentile
23.0%
Classification
CWE
CWE-670
CWE-347
Status
draft
Affected Products (3)
crates.io/ismp-grandpa
< 15.0.1crates.io
crates.io/grandpa-verifier-primitives
< 0.1.2crates.io
crates.io/grandpa-verifier
< 0.1.2crates.io
Timeline
Published
Jan 28, 2025
Tracked Since
Feb 18, 2026