CVE-2026-114118
MEDIUM
6,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM
4,8
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: low
Availability: low
Description
AI Translation Available
Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction without first checking that code_offset is below the blueprint's code size, so a huge offset wraps to a small positive value. An attacker controlling code_offset can make a factory deploy contracts with no runtime code, potentially trapping ETH and tokens.
681
Incorrect Conversion between Numeric Types
DraftCommon Consequences
Security Scopes Affected:
Other
Integrity
Potential Impacts:
Unexpected State
Quality Degradation
Applicable Platforms
Languages:
C, Not Language-Specific
https://github.com/vyperlang/vyper/security/advisories/GHSA-fxg7-4wqg-c8gh
https://www.vulncheck.com/advisories/vyper-0.3.4-through-0.5-0b1-create-from-bl…