CVE-2021-41121
published 2021-10-06CVE-2021-41121: Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory…
PriorityP344high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.04%
60.1th percentile
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack. This issue has been resolved in version 0.3.0.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vyperlang | vyper | < 0.3.0 | 0.3.0 |
| vyperlang | vyper | >= 0 < 0.3.0 | 0.3.0 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Memory corruption when returning a literal struct with a private call inside of it
osv·2021-10-12
CVE-2021-41121 [HIGH] Memory corruption when returning a literal struct with a private call inside of it
Memory corruption when returning a literal struct with a private call inside of it
### Impact
When performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack.
### Patches
0.3.0 / #2447
*
GHSA
Memory corruption when returning a literal struct with a private call inside of it
ghsa·2021-10-12
CVE-2021-41121 [HIGH] CWE-119 Memory corruption when returning a literal struct with a private call inside of it
Memory corruption when returning a literal struct with a private call inside of it
### Impact
When performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack.
### Patches
0.3.0 / #2447
*
OSV
CVE-2021-41121: Vyper is a Pythonic Smart Contract Language for the EVM
osv·2021-10-06
CVE-2021-41121 CVE-2021-41121: Vyper is a Pythonic Smart Contract Language for the EVM
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack. This issue has been resolved in version 0.3.0.
No detection rules found.
No public exploits indexed.
2021-10-06
Published