CVE-2022-29077: Ripple Rippled

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a rippled node, which may lead to XRPL mainnet DoS or compromise. This exposes all digital assets on the XRPL to a security threat.

Affected products

• Ripple Rippled: before 1.8.5 (fixed in 1.8.5)

Published 2022-04-25. Last modified 2026-06-17.