GHSA-22wc-c9wj-6q2v

Suggest an improvement
Source
https://github.com/advisories/GHSA-22wc-c9wj-6q2v
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/04/GHSA-22wc-c9wj-6q2v/GHSA-22wc-c9wj-6q2v.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-22wc-c9wj-6q2v
Published
2021-04-19T15:12:05Z
Modified
2024-12-02T05:42:23Z
Summary
VVE-2021-0001: Memory corruption using function calls within arrays
Details

Impact

When performing a function call inside an array, there is a memory corruption issue that occurs because of an incorrect pointer to the the tip of the stack.

Patches

This issue was partially fixed in VVE-2020-0004, however the fix did not update similar code for arrays, which had a similar issue. The issue is fully fixed in https://github.com/vyperlang/vyper/pull/2345

Database specific 
{
    "cwe_ids":  [
        "CWE-129"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2021-04-16T23:11:53Z",
    "nvd_published_at":  null,
    "severity":  "MODERATE"
}
References

Affected packages

PyPI / vyper

Package

Name
vyper
View open source insights on deps.dev
Purl
pkg:pypi/vyper

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.2.12

Affected versions

0.*
0.1.0b1
0.1.0b2
0.1.0b3
0.1.0b4
0.1.0b5
0.1.0b6
0.1.0b7
0.1.0b8
0.1.0b9
0.1.0b10
0.1.0b11
0.1.0b12
0.1.0b13
0.1.0b14
0.1.0b15
0.1.0b16
0.1.0b17
0.2.1
0.2.2
0.2.3
0.2.4
0.2.5
0.2.6
0.2.7
0.2.8
0.2.9
0.2.10
0.2.11

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/04/GHSA-22wc-c9wj-6q2v/GHSA-22wc-c9wj-6q2v.json"