GitHub Advisoryadvisory · PyPI

GHSA-22wc-c9wj-6q2v VVE-2021-0001: Memory corruption using function calls within arrays

MEDIUM Published 2021-04-19 Modified 2021-04-16 Official page ↗
Ecosystem
PyPI
Packages
vyper
Severity
Moderate
Weaknesses
CWE-129
Reviewed
2021-04-16

Affected packages

• PyPI vyper: < 0.2.12 → fixed in 0.2.12

Description

Impact When performing a function call inside an array, there is a memory corruption issue that occurs because of an incorrect pointer to the the tip of the stack. Patches This issue was partially fixed in VVE-2020-0004, however the fix did not update similar code for arrays, which had a similar issue. The issue is fully fixed in https://github.com/vyperlang/vyper/pull/2345

Related

Weakness · CWE (1)

  • CWE-129 Improper Validation of Array Index weakness

References