PT-2021-23104 · Vyper · Vyper

Charles-Cooper · Published 2021-10-06 · Updated 2023-08-02 · CVE-2021-41121

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vyper versions prior to 0.3.0

Description The issue occurs when performing a function call inside a literal struct, resulting in a memory corruption problem due to an incorrect pointer to the top of the stack.

Recommendations For versions prior to 0.3.0, update to version 0.3.0 to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2021-41121

GHSA-XV8X-PR4H-73JV

PYSEC-2021-365

Affected Products

Vyper

References · 8

• https://github.com/vyperlang/vyper/pull/2447 · Patch
• https://osv.dev/vulnerability/GHSA-xv8x-pr4h-73jv · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41121 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41121 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-365 · Vendor Advisory
• https://github.com/vyperlang/vyper/security/advisories/GHSA-xv8x-pr4h-73jv · Note
• https://github.com/vyperlang/vyper · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2021-365.yaml · Note