CVE-2023-32058
CVSS V2 None
CVSS V3 None
Description
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loop variables, by assigning the iterator of a loop to a variable, it is possible to overflow the type of the latter. The issue seems to happen only in loops of type `for i in range(a, a + N)` as in loops of type `for i in range(start, stop)` and `for i in range(stop)`, the compiler is able to raise a `TypeMismatch` when trying to overflow the variable. The problem has been patched in version 0.3.8.
Overview
- CVE ID
- CVE-2023-32058
- Assigner
- security-advisories@github.com
- Vulnerability Status
- Received
- Published Version
- 2023-05-11T21:15:10
- Last Modified Date
- 2023-05-11T21:15:10
Weakness Enumerations
References
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-32058 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32058 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-05-11 22:00:31 | Added to TrackCVE | |||
| 2023-05-11 22:00:33 | Weakness Enumeration | new |