Buffer Overflow in vyper
Description
Published by the National Vulnerability Database
Apr 13, 2022
Published to the GitHub Advisory Database
Apr 20, 2022
Reviewed
Apr 20, 2022
Last updated
Jan 27, 2023
Impact
Importing a function from a JSON interface which returns
bytes
generates bytecode which does not clamp bytes length, potentially resulting in a buffer overrun.Patches
0.3.2 (as of vyperlang/vyper@049dbdc)
Workarounds
Use .vy interfaces.
References