1. Home
  2. CVE Database
  3. CVE-2023-30837
HIGH · 7.5

CVE-2023-30837

Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. Thi...

Vulnerability Description

Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. This issue was fixed in version 0.3.8.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
VyperlangVyper< 0.3.8

Related Weaknesses (CWE)

CWE-789

References

FAQ

What is CVE-2023-30837?

CVE-2023-30837 is a vulnerability with a CVSS score of 7.5 (HIGH). Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. Thi...

How severe is CVE-2023-30837?

CVE-2023-30837 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-30837?

Check the references section above for vendor advisories and patch information. Affected products include: Vyperlang Vyper.