https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:45:46.200944+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-26400 EUVD-2026-26400 2026-10-07T10:45:46.203842+00:00 EUVD-2026-26400 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29511 fkie_cve-2021-29511 2026-10-07T10:45:46.203874+00:00

evm is a pure Rust implementation of Ethereum Virtual Machine. Prior to the patch, when executing specific EVM opcodes related to memory operations that use `evm_core::Memory::copy_large`, the `evm` crate can over-allocate memory when it is not needed, making it possible for an attacker to perform denial-of-service attack. The flaw was corrected in commit `19ade85`. Users should upgrade to `==0.21.1, ==0.23.1, ==0.24.1, ==0.25.1, >=0.26.1`. There are no workarounds. Please upgrade your `evm` crate version.

 https://cve.radiocsirt.org/vuln/ghsa-4jwq-572w-4388 GHSA-4jwq-572w-4388 — Memory over-allocation in evm crate 2026-10-07T10:45:46.203908+00:00

Affected: crates.io: evm, crates.io: evm-core

### Impact Prior to the patch, when executing specific EVM opcodes related to memory operations that use `evm_core::Memory::copy_large`, the crate can over-allocate memory when it is not needed, making it possible for an attacker to perform denial-of-service attack.

### Patches The flaw was corrected in commit `19ade85`. Users should upgrade to `==0.21.1, ==0.23.1, ==0.24.1, ==0.25.1, >=0.26.1`.

### Workarounds None. Please upgrade your `evm` crate version

### References Fix commit: https://github.com/rust-blockchain/evm/commit/19ade858c430ab13eb562764a870ac9f8506f8dd

### For more information If you have any questions or comments about this advisory: * Open an issue in [evm repo](https://github.com/rust-blockchain/evm) * Email [Wei](mailto:wei@that.world)

 https://cve.radiocsirt.org/vuln/gsd-2021-29511 gsd-2021-29511 2026-10-07T10:45:46.203944+00:00 gsd-2021-29511