Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions 0.3.10 and prior, incorrect values can be logged when `raw_log` builtin is called with memory or storage arguments to be used as topics. A contract search was performed and no vulnerable contracts were found in production. The `build_IR` function of the `RawLog` class fails to properly unwrap the variables provided as topics. Consequently, incorrect values are logged as topics. As of time of publication, no fixed version is available.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-04-25T17:18:27.026Z

Updated: 2024-08-02T02:13:40.291Z

Reserved: 2024-04-16T14:15:26.875Z

Link: CVE-2024-32645

cve-icon Vulnrichment

Updated: 2024-07-03T17:11:07.264Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-04-25T18:15:08.593

Modified: 2024-04-26T12:58:17.720

Link: CVE-2024-32645

cve-icon Redhat

No data.