Incorrect Calculation

2023-03-1007:58:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

openzeppelin contracts

vulnerability

_beforetokentransfer

balance update

erc721consecutive

token overflow

software

EPSS

0.001

Percentile

29.7%

JSON

OpenZeppelin Contracts is vulnerable to Incorrect Calculations. The vulnerability exists in the _beforeTokenTransfer function because ERC721Consecutive does not update balances when the batch has a size of one and consists of a single token, resulting in a token overflow when calling the balanceOf function.