VYPR

Soroban Fixed Point Math

by Script3

Source repositories

CVEs (1)

  • CVE-2026-24783HigJan 27, 2026
    risk 0.42cvss 7.5epss 0.00

    soroban-fixed-point-math is a fixed-point math library for Soroban smart contacts. In versions 1.3.0 and 1.4.0, the `mulDiv(x, y, z)` function incorrectly handled cases where both the intermediate product $x * y$ and the divisor $z$ were negative. The logic assumed that if the…