vyperlang records
38 published records for vendor vyperlang.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-670 Always-Incorrect Control Flow Implementation6
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer4
- CWE-787 Out-of-bounds Write3
- CWE-682 Incorrect Calculation3
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-20 Improper Input Validation2
The weakness classes this vendor ships most often: where to look.
CWEAll records
38 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-24563No exploit | Vyper array negative index vulnerabilityvyperlang · vyper · CWE-129 | Critical9.8 | — | 1.5% | Feb 7, 2024 |
39Monitor | CVE-2022-24845No exploit | Integer bounds error in Vypervyperlang · vyper · CWE-190 | Critical9.8 | — | 1.4% | Apr 13, 2022 |
39Monitor | CVE-2022-24788No exploit | Buffer overflow in Vypervyperlang · vyper · CWE-120 | Critical9.8 | — | 0.9% | Apr 13, 2022 |
39Monitor | CVE-2024-24561No exploit | Vyper bounds check on built-in `slice()` function can be overflowedvyperlang · vyper · CWE-119 | Critical9.8 | — | 0.9% | Feb 1, 2024 |
39Monitor | CVE-2024-22419No exploit | concat built-in can corrupt memory in vypervyperlang · vyper · CWE-120 | Critical9.8 | — | 0.7% | Jan 18, 2024 |
36Monitor | CVE-2023-31146No exploit | Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignmentvyperlang · vyper · CWE-787 | Critical9.1 | — | 1.2% | May 11, 2023 |
36Monitor | CVE-2023-39363No exploit | Vyper incorrectly allocated named re-entrancy locksvyperlang · vyper · CWE-863 | Critical9.1 | — | 0.8% | Aug 7, 2023 |
35Monitor | CVE-2021-41121No exploit | Memory corruption in Vypervyperlang · vyper · CWE-119 | High8.8 | — | 1.0% | Oct 6, 2021 |
32Monitor | CVE-2023-42443No exploit | Vyper vulnerable to memory corruption in certain builtins utilizing `msize`vyperlang · vyper · CWE-787 | High8.1 | — | 0.8% | Sep 18, 2023 |
30Monitor | CVE-2022-29255No exploit | Multiple evaluation of contract address in call in vypervyperlang · vyper · CWE-670 | High7.5 | — | 1.3% | Jun 9, 2022 |
30Monitor | CVE-2022-24787No exploit | Incorrect Comparison in Vypervyperlang · vyper · CWE-697 | High7.5 | — | 1.0% | Apr 4, 2022 |
30Monitor | CVE-2023-32058No exploit | Vyper vulnerable to integer overflow in loopvyperlang · vyper · CWE-190 | High7.5 | — | 0.9% | May 11, 2023 |
30Monitor | CVE-2023-30629No exploit | Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success valuevyperlang · vyper · CWE-670 | High7.5 | — | 0.8% | Apr 24, 2023 |
30Monitor | CVE-2023-32059No exploit | Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal callsvyperlang · vyper · CWE-683 | High7.5 | — | 0.7% | May 11, 2023 |
30Monitor | CVE-2023-30837No exploit | Vyper storage allocator overflowvyperlang · vyper · CWE-789 | High7.5 | — | 0.6% | May 8, 2023 |
30Monitor | CVE-2023-46247No exploit | Vyper has incorrect storage layout for contracts containing large arraysvyperlang · vyper · CWE-193 | High7.5 | — | 0.6% | Dec 13, 2023 |
30Monitor | CVE-2023-42460No exploit | _abi_decode input not validated in complex expressions in Vypervyperlang · vyper · CWE-682 | High7.5 | — | 0.6% | Sep 27, 2023 |
21Monitor | CVE-2024-32481No exploit | vyper's range(start, start + N) reverts for negative numbersvyperlang · vyper · CWE-681 | Medium5.3 | — | 0.7% | Apr 25, 2024 |
21Monitor | CVE-2023-37902No exploit | Vyper's ecrecover can return undefined data if signature does not verifyvyperlang · vyper · CWE-252 | Medium5.3 | — | 0.5% | Jul 25, 2023 |
21Monitor | CVE-2024-24564No exploit | Vyper extract32 can ready dirty memoryvyperlang · vyper · CWE-125 | Medium5.3 | — | 0.5% | Feb 26, 2024 |
21Monitor | CVE-2023-32675No exploit | Nonpayable default functions are sometimes payable in vypervyperlang · vyper · CWE-670 | Medium5.3 | — | 0.5% | May 19, 2023 |
21Monitor | CVE-2024-26149No exploit | Vyper _abi_decode Memory Overflowvyperlang · vyper · CWE-119 | Medium5.3 | — | 0.5% | Feb 26, 2024 |
21Monitor | CVE-2023-41052No exploit | Vyper: incorrect order of evaluation of side effects for some builtinsvyperlang · vyper · CWE-670 | Medium5.3 | — | 0.5% | Sep 4, 2023 |
21Monitor | CVE-2024-24560No exploit | Vyper external calls can overflow return data to return input buffervyperlang · vyper · CWE-119 | Medium5.3 | — | 0.5% | Feb 2, 2024 |
21Monitor | CVE-2023-42441No exploit | Vyper has incorrect re-entrancy lock when key is empty stringvyperlang · vyper · CWE-833 | Medium5.3 | — | 0.5% | Sep 18, 2023 |
- CVE-2024-2456339Monitor
Vyper array negative index vulnerability
CriticalCVSS 9.8No exploitEPSS 1%vyperlang · vyperFeb 7, 2024
- CVE-2022-2484539Monitor
Integer bounds error in Vyper
CriticalCVSS 9.8No exploitEPSS 1%vyperlang · vyperApr 13, 2022
- CVE-2022-2478839Monitor
Buffer overflow in Vyper
CriticalCVSS 9.8No exploitEPSS 0%vyperlang · vyperApr 13, 2022
- CVE-2024-2456139Monitor
Vyper bounds check on built-in `slice()` function can be overflowed
CriticalCVSS 9.8No exploitEPSS 0%vyperlang · vyperFeb 1, 2024
- CVE-2024-2241939Monitor
concat built-in can corrupt memory in vyper
CriticalCVSS 9.8No exploitEPSS 0%vyperlang · vyperJan 18, 2024
- CVE-2023-3114636Monitor
Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
CriticalCVSS 9.1No exploitEPSS 1%vyperlang · vyperMay 11, 2023
- CVE-2023-3936336Monitor
Vyper incorrectly allocated named re-entrancy locks
CriticalCVSS 9.1No exploitEPSS 0%vyperlang · vyperAug 7, 2023
- CVE-2021-4112135Monitor
Memory corruption in Vyper
HighCVSS 8.8No exploitEPSS 1%vyperlang · vyperOct 6, 2021
- CVE-2023-4244332Monitor
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
HighCVSS 8.1No exploitEPSS 0%vyperlang · vyperSep 18, 2023
- CVE-2022-2925530Monitor
Multiple evaluation of contract address in call in vyper
HighCVSS 7.5No exploitEPSS 1%vyperlang · vyperJun 9, 2022
- CVE-2022-2478730Monitor
Incorrect Comparison in Vyper
HighCVSS 7.5No exploitEPSS 1%vyperlang · vyperApr 4, 2022
- CVE-2023-3205830Monitor
Vyper vulnerable to integer overflow in loop
HighCVSS 7.5No exploitEPSS 0%vyperlang · vyperMay 11, 2023
- CVE-2023-3062930Monitor
Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value
HighCVSS 7.5No exploitEPSS 0%vyperlang · vyperApr 24, 2023
- CVE-2023-3205930Monitor
Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls
HighCVSS 7.5No exploitEPSS 0%vyperlang · vyperMay 11, 2023
- CVE-2023-3083730Monitor
Vyper storage allocator overflow
HighCVSS 7.5No exploitEPSS 0%vyperlang · vyperMay 8, 2023
- CVE-2023-4624730Monitor
Vyper has incorrect storage layout for contracts containing large arrays
HighCVSS 7.5No exploitEPSS 0%vyperlang · vyperDec 13, 2023
- CVE-2023-4246030Monitor
_abi_decode input not validated in complex expressions in Vyper
HighCVSS 7.5No exploitEPSS 0%vyperlang · vyperSep 27, 2023
- CVE-2024-3248121Monitor
vyper's range(start, start + N) reverts for negative numbers
MediumCVSS 5.3No exploitEPSS 0%vyperlang · vyperApr 25, 2024
- CVE-2023-3790221Monitor
Vyper's ecrecover can return undefined data if signature does not verify
MediumCVSS 5.3No exploitEPSS 0%vyperlang · vyperJul 25, 2023
- CVE-2024-2456421Monitor
Vyper extract32 can ready dirty memory
MediumCVSS 5.3No exploitEPSS 0%vyperlang · vyperFeb 26, 2024
- CVE-2023-3267521Monitor
Nonpayable default functions are sometimes payable in vyper
MediumCVSS 5.3No exploitEPSS 0%vyperlang · vyperMay 19, 2023
- CVE-2024-2614921Monitor
Vyper _abi_decode Memory Overflow
MediumCVSS 5.3No exploitEPSS 0%vyperlang · vyperFeb 26, 2024
- CVE-2023-4105221Monitor
Vyper: incorrect order of evaluation of side effects for some builtins
MediumCVSS 5.3No exploitEPSS 0%vyperlang · vyperSep 4, 2023
- CVE-2024-2456021Monitor
Vyper external calls can overflow return data to return input buffer
MediumCVSS 5.3No exploitEPSS 0%vyperlang · vyperFeb 2, 2024
- CVE-2023-4244121Monitor
Vyper has incorrect re-entrancy lock when key is empty string
MediumCVSS 5.3No exploitEPSS 0%vyperlang · vyperSep 18, 2023