Memory corruption in Vyper
CVE-2021-41121

7.5HIGH

Key Information:

Vendor

Vyperlang

Status
Vyper
Vendor
CVE Published:
6 October 2021

What is CVE-2021-41121?

Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack. This issue has been resolved in version 0.3.0.

Affected Version(s)

vyper < 0.3.0

References

https://github.com/vyperlang/vyper/pull/2447
x_refsource_MISC
https://github.com/vyperlang/vyper/security/advisories/GH...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.