Lucene search

Vyper's `_abi_decode` input not validated in complex expressions

🗓️ 26 Sep 2023 19:53:34Reported by GitHub Advisory DatabaseType

Vyper's input validation issue in _abi_decod

Reporter	Title	Published	Views	Family All 9
Veracode	Incorrect Bounds Checking	28 Sep 202310:13	–	veracode
CVE	CVE-2023-42460	27 Sep 202315:19	–	cve
Cvelist	CVE-2023-42460 _abi_decode input not validated in complex expressions in Vyper	26 Sep 202318:47	–	cvelist
NVD	CVE-2023-42460	27 Sep 202315:19	–	nvd
OSV	CVE-2023-42460	27 Sep 202315:19	–	osv
OSV	PYSEC-2023-191	27 Sep 202315:19	–	osv
OSV	Vyper's `_abi_decode` input not validated in complex expressions	26 Sep 202319:34	–	osv
Prion	Out-of-bounds	27 Sep 202315:19	–	prion
Vulnrichment	CVE-2023-42460 _abi_decode input not validated in complex expressions in Vyper	26 Sep 202318:47	–	vulnrichment

Vulners

Node

-vyperRange0.3.4–0.3.10

Source	Link
github	www.github.com/vyperlang/vyper/security/advisories/GHSA-cx2q-hfxr-rj97
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-42460
github	www.github.com/vyperlang/vyper/pull/3626
github	www.github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2023-191.yaml
github	www.github.com/advisories/GHSA-cx2q-hfxr-rj97

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Sep 2023 19:34Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.001

CWE-682