High severityNVD Advisory· Published May 8, 2023· Updated Jan 29, 2025
Vyper storage allocator overflow
CVE-2023-30837
Description
Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. This issue was fixed in version 0.3.8.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
vyperPyPI | < 0.3.8 | 0.3.8 |
Affected products
2Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-mgv8-gggw-mrg6ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-30837ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2023-76.yamlghsaWEB
- github.com/vyperlang/vyper/commit/0bb7203b584e771b23536ba065a6efda457161bbghsax_refsource_MISCWEB
- github.com/vyperlang/vyper/security/advisories/GHSA-mgv8-gggw-mrg6ghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.