CVE-2023-30837

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p51

Published

May 8, 2023 (May 8, 2023)

Modified

Jun 17, 2026

Description

Vyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. This issue was fixed in version 0.3.8.

Vendors: vyperlang
Products: vyper
Weakness: CWE-789
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.