Skip to content
OpenAdvisories
High · 7.5 CVE-2021-41121 EUVD-2021-0459GHSA-xv8x-pr4h-73jvPYSEC-2021-365

Memory corruption in Vyper

Published Oct 6, 2021 · Updated Aug 4, 2024 · Assigned by GitHub_M

Description

Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack. This issue has been resolved in version 0.3.0.

Affected products

VendorProductAffectedFixed
vyperlang vyper < 0.3.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI vyper < 0.3.0 0.3.0 GHSA-xv8x-pr4h-73jv

References