Lucene search
+L

3 matches found

OSV
OSV
added 2024/01/18 6:45 p.m.30 views

CVE-2024-22419 concat built-in can corrupt memory in vyper

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. The concat built-in can write over the bounds of the memory buffer that was allocated for it and thus overwrite existing valid data. The root cause is that the buildIR for concat doesn't properly adhere to the API of co...

7.3CVSS9.3AI score0.0077EPSS
SaveExploits1References5
Rows per page
Query Builder