{
"id": "GHSA-22wc-c9wj-6q2v",
"aliases": [],
"details": "### Impact\nWhen performing a function call inside an array, there is a memory corruption issue that occurs because of an incorrect pointer to the the tip of the stack.\n\n### Patches\nThis issue was partially fixed in [VVE-2020-0004](https://github.com/vyperlang/vyper/security/advisories/GHSA-2r3x-4mrv-mcxf), however the fix did not update similar code for arrays, which had a similar issue. The issue is fully fixed in https://github.com/vyperlang/vyper/pull/2345",
"summary": "VVE-2021-0001: Memory corruption using function calls within arrays",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.12"
}
]
}
],
"package": {
"name": "vyper",
"ecosystem": "PyPI"
}
}
],
"modified": "2021-04-16T23:11:53Z",
"severity": [],
"published": "2021-04-19T15:12:05Z",
"references": [
{
"url": "https://github.com/vyperlang/vyper/security/advisories/GHSA-22wc-c9wj-6q2v",
"type": "WEB"
},
{
"url": "https://github.com/vyperlang/vyper/pull/2345",
"type": "WEB"
},
{
"url": "https://github.com/vyperlang/vyper/commit/11b7b5b7e59bc9dc859d51cd41a924b59fe47c9e",
"type": "WEB"
},
{
"url": "https://pypi.org/project/vyper",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-129"
],
"severity": "MODERATE",
"github_reviewed": true,
"nvd_published_at": null,
"github_reviewed_at": "2021-04-16T23:11:53Z"
}
}