GitHub Advisoryadvisory · PyPI

GHSA-xv8x-pr4h-73jv Memory corruption when returning a literal struct with a private call inside of it

HIGH Published 2021-10-12 Modified 2024-11-18 Official page ↗
Aliases
CVE-2021-41121
Ecosystem
PyPI
Packages
vyper
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-119
Reviewed
2021-10-06

Affected packages

• PyPI vyper: < 0.3.0 → fixed in 0.3.0

Description

Impact When performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack. Patches 0.3.0 / #2447 *

Related

Alias · CVE (1)

  • CVE-2021-41121 Vyper is a Pythonic Smart Contract Language for the EVM. vulnerability

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References