Логотип exploitDog
bind:CVE-2023-41052
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-41052

Количество 2

Количество 2

nvd логотип

CVE-2023-41052

больше 2 лет назад

Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions `uint256_addmod`, `uint256_mulmod`, `ecadd` and `ecmul` does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on. A patch is currently being developed on pull request #3583. When using builtins from the list above, users should make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.

CVSS3: 3.7
EPSS: Низкий
github логотип

GHSA-4hg4-9mf5-wxxq

больше 2 лет назад

incorrect order of evaluation of side effects for some builtins

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-41052

Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions `uint256_addmod`, `uint256_mulmod`, `ecadd` and `ecmul` does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on. A patch is currently being developed on pull request #3583. When using builtins from the list above, users should make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.

CVSS3: 3.7
0%
Низкий
больше 2 лет назад
github логотип
GHSA-4hg4-9mf5-wxxq

incorrect order of evaluation of side effects for some builtins

CVSS3: 5.3
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу