CVE-2021-41121: Memory corruption when returning a literal struct with a private call inside of it

October 12, 2021 (updated November 18, 2024)

When performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack.

References

github.com/advisories/GHSA-xv8x-pr4h-73jv
github.com/pypa/advisory-database/tree/main/vulns/vyper/PYSEC-2021-365.yaml
github.com/vyperlang/vyper
github.com/vyperlang/vyper/pull/2447
github.com/vyperlang/vyper/security/advisories/GHSA-xv8x-pr4h-73jv
nvd.nist.gov/vuln/detail/CVE-2021-41121

Code Behaviors & Features

Detect and mitigate CVE-2021-41121 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →