CVE-2020-37289 | VyperLang Vyper up to 0.3.0 Interface Return Values ERC20.decimals memory corruption

October 21, 2026 Yanac

A vulnerability, which was classified as problematic, was found in VyperLang Vyper up to 0.3.0. The affected element is the function ERC20.decimals of the component Interface Return Values. Executing a manipulation can lead to memory corruption.

This vulnerability is registered as CVE-2020-37289. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More