Skip to content

A floating-point underflow vulnerability #3

@kgchinthana

Description

@kgchinthana

The system is vulnerable to floating-point underflow due to accepting extremely high payment values followed by reversals, leading to zero net cost. Additionally, using floating-point arithmetic for financial calculations causes precision errors. Proper input validation, range limits, and the use of Decimal instead of floats are necessary to prevent such exploits.https://medium.com/@jollyfish/integer-overflow-underflow-and-floating-point-imprecision-6ba869a99033

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions