Skip to content

VVE-2021-0001: Memory corruption using function calls within arrays

Moderate severity GitHub Reviewed Published Apr 16, 2021 in vyperlang/vyper • Updated Jan 9, 2023

Package

pip vyper (pip)

Affected versions

< 0.2.12

Patched versions

0.2.12

Description

Impact

When performing a function call inside an array, there is a memory corruption issue that occurs because of an incorrect pointer to the the tip of the stack.

Patches

This issue was partially fixed in VVE-2020-0004, however the fix did not update similar code for arrays, which had a similar issue. The issue is fully fixed in vyperlang/vyper#2345

References

@fubuloubu fubuloubu published to vyperlang/vyper Apr 16, 2021
Reviewed Apr 16, 2021
Published to the GitHub Advisory Database Apr 19, 2021
Last updated Jan 9, 2023

Severity

Moderate

Weaknesses

CVE ID

No known CVE

GHSA ID

GHSA-22wc-c9wj-6q2v

Source code

No known source code
Checking history
See something to contribute? Suggest improvements for this vulnerability.