CVE-2026-114118
CVE-2026-114118 · Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction without first checking that code_offset is below the blueprint's code size, so a huge offset wraps to a small positive value. An attacker controlling code_offset can make a factory deploy contracts with no runtime code, potentially trapping ETH and tokens.
CVSS 6.3 · Medium · EPSS 0.2%
- Published
- Updated
Affected products and versions
vyper
- Versions
- ≥ 0.3.4, ≤ 0.5.0b1: Affected (python)
No fix published