AIKIDO-2025-10264
@fuels/vm-asm is vulnerable to Heap Inspection
40
Medium Risk
This Affects:
@fuels/vm-asmTL;DR
Affected versions of this package are vulnerable to heap inspection due to uncleared memory being reused during reallocation after a reset. When expanding a heap vector, uninitialized or sensitive data from the previously used memory may be copied into the new buffer. To prevent leaking dirty memory, the affected code should zero out the memory either before or after copying, which is done in the fixed version.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
@fuels/vm-asm is vulnerable to Heap Inspection in versions 0.49.0 - 0.60.0.
How to fix this
Upgrade the @fuels/vm-asm library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant