A missing size bound in a network reader lets a tiny crafted packet crash the node
- Severity
- High
- Class
- Consensus & liveness
- System
- Feeless Layer-1 node
An unauthenticated, few-byte packet crashes a node, and at scale stalls confirmations across the network.
A reader for real-time network traffic trusted a length it was handed without bounding it against what had actually arrived. A tiny, deliberately inconsistent packet was enough to push the reader past the data and crash the node.
It costs the attacker almost nothing and needs no authentication — just a connection.
Why it rated High
Cheap, unauthenticated remote crashes; enough of them aimed at the right nodes stall network confirmations.
The fix class
Bound declared sizes against the bytes actually received before reading, and drop malformed frames.
