PT-2021-24365 · Vyper · Vyper

Published 2021-04-19 · Updated 2021-04-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Vyper (affected versions not specified)

Description: The issue is related to a memory corruption problem that occurs when performing a function call inside an array, due to an incorrect pointer to the top of the stack.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

GHSA-22WC-C9WJ-6Q2V

Affected Products

Vyper

References · 5

• https://osv.dev/vulnerability/GHSA-22wc-c9wj-6q2v · Vendor Advisory
• https://github.com/vyperlang/vyper/pull/2345 · Note
• https://github.com/vyperlang/vyper/commit/11b7b5b7e59bc9dc859d51cd41a924b59fe47c9e · Note
• https://github.com/vyperlang/vyper/security/advisories/GHSA-22wc-c9wj-6q2v · Note
• https://pypi.org/project/vyper · Note