CVE-2024-32481
- Source
- https://cve.org/CVERecord?id=CVE-2024-32481
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-32481.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-32481
- Aliases
- Published
- 2024-04-25T17:00:54Z
- Modified
- 2026-10-21T02:30:16Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- vyper's range(start, start + N) reverts for negative numbers
- Details
-
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in version 0.3.8 and prior to version 0.4.0b1, when looping over a
rangeof the formrange(start, start + N), ifstartis negative, the execution will always revert. This issue is caused by an incorrect assertion inserted by the code generation of the rangestmt.parse_For_range(). The issue arises whenstartis signed, instead of usingsle,leis used andstartis interpreted as an unsigned integer for the comparison. If it is a negative number, its 255th bit is set to1and is hence interpreted as a very large unsigned integer making the assertion always fail. Any contract having arange(start, start + N)wherestartis a signed integer with the possibility forstartto be negative is affected. If a call goes through the loop while supplying a negativestartthe execution will revert. Version 0.4.0b1 fixes the issue. - Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-681" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32481.json" }- References
-
- https://github.com/vyperlang/vyper/blob/9136169468f317a53b4e7448389aa315f90b95ba/vyper/codegen/stmt.py#L286-L287
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32481.json
- https://github.com/vyperlang/vyper/security/advisories/GHSA-ppx5-q359-pvwj
- https://nvd.nist.gov/vuln/detail/CVE-2024-32481
- https://github.com/vyperlang/vyper/commit/3de1415ee77a9244eb04bdb695e249d3ec9ed868
- https://github.com/vyperlang/vyper/commit/5319cfbe14951e007ccdb323257e5ada869b35d5
Affected packages
Git / github.com/vyperlang/vyper
Affected ranges
- Type
- GIT
- Repo
- https://github.com/vyperlang/vyper
- Events
-
IntroducedLast AffectedIntroducedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:vyperlang:vyper:*:*:*:*:*:python:*:*", "range": [ { "introduced": "0.3.8" }, { "last_affected": "0.3.10" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:vyperlang:vyper:0.4.0:-:*:*:*:python:*:*", "range": [ { "introduced": "0.4.0-NA" }, { "last_affected": "0.4.0-NA" } ], "source": "CPE_STRING" }, { "range": [ { "fixed": "3de1415ee77a9244eb04bdb695e249d3ec9ed868" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "5319cfbe14951e007ccdb323257e5ada869b35d5" } ], "source": "REFERENCES_COMMIT" } ] }