CVE-2021-41121highCWE-119

CVE-2021-41121: high-severity vulnerability in vyperlang vyper

Memory corruption in Vyper

Published · Updated

Follow this CVE+ Monitor vyper+ Monitor vyper

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.1%
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack. This issue has been resolved in version 0.3.0.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
vyperlang · vyper
Related CVEs — vyperlang vyper

In the same product, most dangerous first.

CVE-2024-24563CRITICALVyper array negative index vulnerabilityEPSS 1.5%CVE-2022-24845HIGHInteger bounds error in VyperEPSS 1.4%CVE-2022-29255HIGHMultiple evaluation of contract address in call in vyperEPSS 1.3%CVE-2023-31146HIGHVyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignmentEPSS 1.3%CVE-2022-24787HIGHIncorrect Comparison in VyperEPSS 1.0%CVE-2022-24788HIGHBuffer overflow in VyperEPSS 1.0%