TGViewer
Hackerone Reports Hackerone Reports @hackeronereports · 241 subscribers
Post #939 55
🎯 New Report #3683934: sign multisig crashes monero-wallet-rpc on a malformed but decryptable multisig txset
🔺Severity: High
👽 Reporter: helping bro
⭐️ Reputation: 372
🛠 State: resolved
💼 Team: Monero
💵 Bounty: null
🕐 Submitted: 2026-04-19
⏰ Disclosed: 2026-09-17 17:45:03
📝 Summary: The vulnerability in monero-wallet-rpc's sign multisig function allowed a malformed but decryptable multisig transaction set to cause a process crash instead of returning an error. The issue was resolved in version 0.18.5.0.
📂 Report JSON File: 3683934
@hackeronereports
More from @hackeronereports
  1. Oct 14, 2026🎯 New Report #4071064: Unauthenticated self-registration on ████████ grants full access t…
  2. Oct 14, 2026🎯 New Report #4022462: Uncaught RecursionError crash in translation-finder (deep director…
  3. Oct 14, 2026🎯 New Report #3988961: Stored XSS on the public Pontoon dashboards: the latest-activity t…
  4. Oct 13, 2026🎯 New Report #3897236: RCE in AWS Amplify CLI via Prototype Chain Traversal in amplify-ve…
  5. Oct 12, 2026🎯 New Report #3189580: Password Reset Allows Reusing Old Password -- [AUTH-3820](https://…
  6. Oct 12, 2026🎯 New Report #3910393: Stack Buffer Overflow in MariaDB CONNECT storage engine when readi…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →