Vulnerability Description
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack. This issue has been resolved in version 0.3.0.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vyperlang | Vyper | < 0.3.0 |
Related Weaknesses (CWE)
References
- https://github.com/vyperlang/vyper/pull/2447PatchThird Party Advisory
- https://github.com/vyperlang/vyper/security/advisories/GHSA-xv8x-pr4h-73jvThird Party Advisory
- https://github.com/vyperlang/vyper/pull/2447PatchThird Party Advisory
- https://github.com/vyperlang/vyper/security/advisories/GHSA-xv8x-pr4h-73jvThird Party Advisory
FAQ
What is CVE-2021-41121?
CVE-2021-41121 is a vulnerability with a CVSS score of 7.5 (HIGH). Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an inco...
How severe is CVE-2021-41121?
CVE-2021-41121 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-41121?
Check the references section above for vendor advisories and patch information. Affected products include: Vyperlang Vyper.