{"id":"GO-2025-4025","summary":"CometBFT's invalid BitArray handling can lead to network halt in github.com/cometbft/cometbft","details":"CometBFT's invalid BitArray handling can lead to network halt in github.com/cometbft/cometbft","aliases":["GHSA-hrhf-2vcr-ghch"],"modified":"2025-11-18T16:14:17.989567Z","published":"2025-11-18T15:44:15Z","database_specific":{"review_status":"REVIEWED","url":"https://pkg.go.dev/vuln/GO-2025-4025"},"references":[{"type":"ADVISORY","url":"https://github.com/cometbft/cometbft/security/advisories/GHSA-hrhf-2vcr-ghch"},{"type":"FIX","url":"https://github.com/cometbft/cometbft/commit/be5677c3e58f998b7f67bb6186dd2c9b81a041a1"},{"type":"FIX","url":"https://github.com/cometbft/cometbft/commit/dcb1f265b59477be40804f7ccdc4fb30612d6a4f"},{"type":"WEB","url":"https://github.com/cometbft/cometbft/releases/tag/v0.37.16"},{"type":"WEB","url":"https://github.com/cometbft/cometbft/releases/tag/v0.38.19"}],"affected":[{"package":{"name":"github.com/cometbft/cometbft","ecosystem":"Go","purl":"pkg:golang/github.com/cometbft/cometbft"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.37.16"},{"introduced":"0.38.0-alpha.1"},{"fixed":"0.38.19"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/cometbft/cometbft/consensus","symbols":["BaseWAL.OnStart","BaseWAL.SearchForEndHeight","Handshaker.Handshake","Handshaker.HandshakeWithContext","Handshaker.ReplayBlocks","Handshaker.ReplayBlocksWithContext","MsgFromProto","NewState","NewValidBlockMessage.ValidateBasic","PeerState.ApplyHasVoteMessage","PeerState.ApplyVoteSetBitsMessage","PeerState.EnsureVoteBitArrays","PeerState.InitProposalBlockParts","PeerState.PickSendVote","PeerState.PickVoteToSend","PeerState.SetHasProposal","PeerState.SetHasProposalBlockPart","PeerState.SetHasVote","ProposalPOLMessage.ValidateBasic","Reactor.AddPeer","Reactor.OnStart","Reactor.Receive","Reactor.SwitchToConsensus","RunReplayFile","State.OnStart","State.OpenWAL","State.ReplayFile","VoteSetBitsMessage.ValidateBasic","WALDecoder.Decode","WALFromProto","WALGenerateNBlocks","WALWithNBlocks"]},{"path":"github.com/cometbft/cometbft/libs/bits","symbols":["BitArray.And","BitArray.Or","BitArray.PickRandom","BitArray.SetIndex","BitArray.Sub","BitArray.UnmarshalJSON","BitArray.copyBits","BitArray.getNumTrueIndices","BitArray.setIndex","NewBitArray","NewBitArrayFromFn"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2025-4025.json"}}],"schema_version":"1.7.3"}