CVE-2022-29255

PoC —

CVSS 3.1

7.5 high

EPSS

1%p69

Published

Jun 9, 2022 (Jun 9, 2022)

Modified

Jun 17, 2026

Description

Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions prior to 0.3.4 when a calling an external contract with no return value, the contract address (including side effects) could be evaluated twice. This may result in incorrect outcomes for contracts. This issue has been addressed in v0.3.4.

Vendors: vyperlang
Products: vyper
Weakness: CWE-670
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.