CVE-2023-30837CWE-789

Vyper storage allocator overflow

High · published May 8, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
52.5
In the wild
Unconfirmed
What it is

Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. This issue was fixed in version 0.3.8.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00697 · 52.5th percentile
Weakness
CWE-789 · Memory Allocation with Excessive Size Value
Published
2023-05-08T16:03Z
EPSS history
Timeline
  • 08 MAY 16:03Z
    Vyper storage allocator overflow
    cvelistv5