ethereum/py-evm

ethereum/py-evm

GitHubGitHub
GitHubgithub.com
py-evm.readthedocs.iopy-evm.readthedocs.io
Releases121
Frequency3 weeks 2 days
Last Release
Stars2.36K
A Python implementation of the Ethereum Virtual Machine
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-18920↗
—6.8 MEDIUM

Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed indefinitely without gas being paid."