Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-30837

Vyper storage allocator overflow

Description

Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. This issue was fixed in version 0.3.8.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

vyperlang vyper

  • < 0.3.8affected

References