What is GHSA-vq78-2j7f-9gqx?

GHSA-vq78-2j7f-9gqx is a security advisory published by GitHub Security Advisories with High severity. Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect...

Which CVE IDs does GHSA-vq78-2j7f-9gqx cover?

GHSA-vq78-2j7f-9gqx covers the following CVE IDs: CVE-2021-48020. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vq78-2j7f-9gqx?

GHSA-vq78-2j7f-9gqx has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-vq78-2j7f-9gqxHighCVSS 6.5

Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect...

Vendor

GitHub Security Advisories

Published

October 21, 2026

Last Modified

October 21, 2026

🔗 CVE IDs covered (1)

CVE-2021-48020 →

📋 Description

Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls are performed inside arrays. Contracts placing internal calls in nested array elements, external call arguments, struct literals, or raw_log topics can have memory corrupted, producing incorrect contract behavior.

🔗 References (4)

https://github.com/vyperlang/vyper/security/advisories/GHSA-22wc-c9wj-6q2v
https://nvd.nist.gov/vuln/detail/CVE-2021-48020
https://www.vulncheck.com/advisories/vyper-before-0.3.0-memory-corruption-via-internal-function-calls-in-arrays
https://github.com/advisories/GHSA-vq78-2j7f-9gqx