Логотип exploitDog
bind:CVE-2023-30629
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-30629

Количество 2

Количество 2

nvd логотип

CVE-2023-30629

почти 3 года назад

Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.1 through 0.3.7, the Vyper compiler generates the wrong bytecode. Any contract that uses the `raw_call` with `revert_on_failure=False` and `max_outsize=0` receives the wrong response from `raw_call`. Depending on the memory garbage, the result can be either `True` or `False`. A patch is available and, as of time of publication, anticipated to be part of Vyper 0.3.8. As a workaround, one may always put `max_outsize>0`.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-w9g2-3w7p-72g9

почти 3 года назад

Incorrect success value returned in vyper

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-30629

Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.1 through 0.3.7, the Vyper compiler generates the wrong bytecode. Any contract that uses the `raw_call` with `revert_on_failure=False` and `max_outsize=0` receives the wrong response from `raw_call`. Depending on the memory garbage, the result can be either `True` or `False`. A patch is available and, as of time of publication, anticipated to be part of Vyper 0.3.8. As a workaround, one may always put `max_outsize>0`.

CVSS3: 7.5
0%
Низкий
почти 3 года назад
github логотип
GHSA-w9g2-3w7p-72g9

Incorrect success value returned in vyper

CVSS3: 7.5
0%
Низкий
почти 3 года назад

Уязвимостей на страницу