62 matches found
CVE-2026-114116
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines, which treats characters like form feed and U+2028 as line breaks the Python parser ignores, so numeric literals are classified and validated from shifted source text. An attacker contributing...
CVE-2026-114116
The Vyper compiler versions 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 are vulnerable to literal value manipulation. The root cause is the use of str.splitlines() to build the source-line table, which incorrectly treats characters like form feed and U+2028 as line breaks while the Python p...
CVE-2026-114116 Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines, which treats characters like form feed and U+2028 as line breaks the Python parser ignores, so numeric literals are classified and validated from shifted source text. An attacker contributing...
EUVD-2026-106919
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines, which treats characters like form feed and U+2028 as line breaks the Python parser ignores, so numeric literals are classified and validated from shifted source text. An attacker contributing...
CVE-2026-114116
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines, which treats characters like form feed and U+2028 as line breaks the Python parser ignores, so numeric literals are classified and validated from shifted source text. An attacker contributing...
CVE-2026-114116 Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines, which treats characters like form feed and U+2028 as line breaks the Python parser ignores, so numeric literals are classified and validated from shifted source text. An attacker contributing...
CVE-2026-114116 Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines, which treats characters like form feed and U+2028 as line breaks the Python parser ignores, so numeric literals are classified and validated from shifted source text. An attacker contributing...
PT-2026-120242
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines, which treats characters like form feed and U+2028 as line breaks the Python parser ignores, so numeric literals are classified and validated from shifted source text. An attacker contributing...
VyperLang Vyper Processing Logic Vulnerability
In versions of Vyper before 0.1.0b17, there were processing logic errors in versions 0.1.0b1 and from 0.4.1 to 0.5.0b1. This issue arose from using str.splitlines to construct a source code line table, where characters such as the page break character and U+2028 were treated as line breaks that...
CVE-2020-24825
A vulnerability in the linetable::linetable function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...
EUVD-2020-20649
Malware in sbrugna...
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.
...
Linux Distros Unpatched Vulnerability : CVE-2020-24825
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the linetable::linetable function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a craft...
libdwarf:fuzz_srcfiles: Heap-buffer-overflow in _dwarf_decode_line_udata_form
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5195296927711232 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzsrcfiles Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
libdwarf:fuzz_macro_dwarf5: Heap-buffer-overflow in _dwarf_read_line_table_header
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5135813562990592 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzmacrodwarf5 Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
CVE-2020-28163
libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...
AZL-33327 CVE-2020-27545 affecting package libdwarf for versions less than 0.9.0
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object...
CVE-2020-28163
libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...