Threat Investigation
Request a demo

CVE-2021-41121

High

Description

Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack. This issue has been resolved in version 0.3.0.

SeverityHigh
CVSS7.5
Exploit probability—
ProductVyper
PublishedOct 6, 2021
First seenOct 6, 2021
Weakness typeCWE-119Memory buffer bounds error

How to fix

Update
  • vyperlang vyper0.3.0 or later
  • vyper0.3.0 or later

Affected products

ProductAffected versionsFixed in
vyperlang vyperv < 0.3.00.3.0
vyperPyPIv < 0.3.00.3.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.