CVE-2026-114118
Medium · 4.8CVSS
4.8
EPSS
0.2%
Published
Oct 21, 2026
CISA due date
—
The record
Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction without first checking that code_offset is below the blueprint's code size, so a huge offset wraps to a small positive value. An attacker controlling code_offset can make a factory deploy contracts with no runtime code, potentially trapping ETH and tokens.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119340 Tesseract is an open source OCR engine. CWE-681
- CVE-2026-118769 Botan is a C++ cryptography library. CWE-681
- CVE-2026-114654 A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver… CWE-681
- CVE-2026-12670 IBM MQ could allow an authenticated attacker to cause a denial of service through a… CWE-681
- CVE-2026-106432 The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value… CWE-681
- CVE-2026-98095 In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast… CWE-681
- CVE-2026-98049 In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the… CWE-681
- CVE-2026-88387 LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in… CWE-681