CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-24567

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Vyper compiler allows passing a value in builtin raw_call even if the call is a delegatecall or a staticcall. But in the context of delegatecall and staticcall the handling of value is not possible due to the semantics of the respective opcodes, and vyper will silently ignore the value= argument. If the semantics of the EVM are unknown to the developer, he could suspect that by specifying the `value` kwarg, exactly the given amount will be sent along to the target. This vulnerability affects 0.3.10 and earlier versions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 41.7%

CVSS Severity

CVSS v3 Score 4.8

References

Products affected by CVE-2024-24567

Vyperlang » Vyper » Version: 0.0.4

cpe:2.3:a:vyperlang:vyper:0.0.4
Vyperlang » Vyper » Version: 0.1.0

cpe:2.3:a:vyperlang:vyper:0.1.0
Vyperlang » Vyper » Version: 0.2.0

cpe:2.3:a:vyperlang:vyper:0.2.0
Vyperlang » Vyper » Version: 0.2.1

cpe:2.3:a:vyperlang:vyper:0.2.1
Vyperlang » Vyper » Version: 0.2.10

cpe:2.3:a:vyperlang:vyper:0.2.10
Vyperlang » Vyper » Version: 0.2.11

cpe:2.3:a:vyperlang:vyper:0.2.11
Vyperlang » Vyper » Version: 0.2.12

cpe:2.3:a:vyperlang:vyper:0.2.12
Vyperlang » Vyper » Version: 0.2.13

cpe:2.3:a:vyperlang:vyper:0.2.13
Vyperlang » Vyper » Version: 0.2.14

cpe:2.3:a:vyperlang:vyper:0.2.14
Vyperlang » Vyper » Version: 0.2.15

cpe:2.3:a:vyperlang:vyper:0.2.15
Vyperlang » Vyper » Version: 0.2.16

cpe:2.3:a:vyperlang:vyper:0.2.16
Vyperlang » Vyper » Version: 0.2.2

cpe:2.3:a:vyperlang:vyper:0.2.2
Vyperlang » Vyper » Version: 0.2.3

cpe:2.3:a:vyperlang:vyper:0.2.3
Vyperlang » Vyper » Version: 0.2.4

cpe:2.3:a:vyperlang:vyper:0.2.4
Vyperlang » Vyper » Version: 0.2.5

cpe:2.3:a:vyperlang:vyper:0.2.5
Vyperlang » Vyper » Version: 0.2.6

cpe:2.3:a:vyperlang:vyper:0.2.6
Vyperlang » Vyper » Version: 0.2.7

cpe:2.3:a:vyperlang:vyper:0.2.7
Vyperlang » Vyper » Version: 0.2.8

cpe:2.3:a:vyperlang:vyper:0.2.8
Vyperlang » Vyper » Version: 0.2.9

cpe:2.3:a:vyperlang:vyper:0.2.9
Vyperlang » Vyper » Version: 0.3.0

cpe:2.3:a:vyperlang:vyper:0.3.0
Vyperlang » Vyper » Version: 0.3.1

cpe:2.3:a:vyperlang:vyper:0.3.1
Vyperlang » Vyper » Version: 0.3.10

cpe:2.3:a:vyperlang:vyper:0.3.10
Vyperlang » Vyper » Version: 0.3.2

cpe:2.3:a:vyperlang:vyper:0.3.2
Vyperlang » Vyper » Version: 0.3.3

cpe:2.3:a:vyperlang:vyper:0.3.3
Vyperlang » Vyper » Version: 0.3.4

cpe:2.3:a:vyperlang:vyper:0.3.4
Vyperlang » Vyper » Version: 0.3.5

cpe:2.3:a:vyperlang:vyper:0.3.5
Vyperlang » Vyper » Version: 0.3.6

cpe:2.3:a:vyperlang:vyper:0.3.6
Vyperlang » Vyper » Version: 0.3.7

cpe:2.3:a:vyperlang:vyper:0.3.7
Vyperlang » Vyper » Version: 0.3.8

cpe:2.3:a:vyperlang:vyper:0.3.8
Vyperlang » Vyper » Version: 0.3.9

cpe:2.3:a:vyperlang:vyper:0.3.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-24567

Products

Pricing

Contact Us