Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-59942

go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.6 and below, go-f3 panics when it validates a "poison" messages causing Filecoin nodes consuming F3 messages to become vulnerable. A "poison" message can can cause integer overflow in the signer index validation, which can cause the whole node to crash. These malicious messages aren't self-propagating since the bug is in the validator. An attacker needs to directly send the message to all targets. This issue is fixed in version 0.8.7.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.4%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2025-59942
  • Filecoin » Go-F3 » Version: 0.0.1
    cpe:2.3:a:filecoin:go-f3:0.0.1
  • Filecoin » Go-F3 » Version: 0.0.2
    cpe:2.3:a:filecoin:go-f3:0.0.2
  • Filecoin » Go-F3 » Version: 0.0.3
    cpe:2.3:a:filecoin:go-f3:0.0.3
  • Filecoin » Go-F3 » Version: 0.0.4
    cpe:2.3:a:filecoin:go-f3:0.0.4
  • Filecoin » Go-F3 » Version: 0.0.5
    cpe:2.3:a:filecoin:go-f3:0.0.5
  • Filecoin » Go-F3 » Version: 0.0.6
    cpe:2.3:a:filecoin:go-f3:0.0.6
  • Filecoin » Go-F3 » Version: 0.0.7
    cpe:2.3:a:filecoin:go-f3:0.0.7
  • Filecoin » Go-F3 » Version: 0.1.0
    cpe:2.3:a:filecoin:go-f3:0.1.0
  • Filecoin » Go-F3 » Version: 0.2.0
    cpe:2.3:a:filecoin:go-f3:0.2.0
  • Filecoin » Go-F3 » Version: 0.3.0
    cpe:2.3:a:filecoin:go-f3:0.3.0
  • Filecoin » Go-F3 » Version: 0.4.0
    cpe:2.3:a:filecoin:go-f3:0.4.0
  • Filecoin » Go-F3 » Version: 0.5.0
    cpe:2.3:a:filecoin:go-f3:0.5.0
  • Filecoin » Go-F3 » Version: 0.6.0
    cpe:2.3:a:filecoin:go-f3:0.6.0
  • Filecoin » Go-F3 » Version: 0.7.0
    cpe:2.3:a:filecoin:go-f3:0.7.0
  • Filecoin » Go-F3 » Version: 0.7.1
    cpe:2.3:a:filecoin:go-f3:0.7.1
  • Filecoin » Go-F3 » Version: 0.7.2
    cpe:2.3:a:filecoin:go-f3:0.7.2
  • Filecoin » Go-F3 » Version: 0.7.3
    cpe:2.3:a:filecoin:go-f3:0.7.3
  • Filecoin » Go-F3 » Version: 0.8.0
    cpe:2.3:a:filecoin:go-f3:0.8.0
  • Filecoin » Go-F3 » Version: 0.8.1
    cpe:2.3:a:filecoin:go-f3:0.8.1
  • Filecoin » Go-F3 » Version: 0.8.2
    cpe:2.3:a:filecoin:go-f3:0.8.2
  • Filecoin » Go-F3 » Version: 0.8.3
    cpe:2.3:a:filecoin:go-f3:0.8.3
  • Filecoin » Go-F3 » Version: 0.8.4
    cpe:2.3:a:filecoin:go-f3:0.8.4
  • Filecoin » Go-F3 » Version: 0.8.5
    cpe:2.3:a:filecoin:go-f3:0.8.5
  • Filecoin » Go-F3 » Version: 0.8.6
    cpe:2.3:a:filecoin:go-f3:0.8.6


Contact Us

Shodan ® - All rights reserved