Solana's vulnerability footprint centers on the rbpf (Rust BPF) runtime component that executes on-chain programs, a specialized and narrowly scoped attack surface compared to traditional software platforms. The observed weakness class involves incorrect calculation logic, reflecting the bytecode-interpretation and arithmetic-precision demands of a blockchain execution layer. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Solana over time
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-23066CRITICAL In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution | May 9, 2022 | 9.1 | 31 | NO | NO |
Signals from CVEs in this vendor scope (1 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Solana.
Media articles that mention a CVE ID that affects a product developed by Solana — matched by CVE ID, not by vendor name.