-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0187
============================================================

Advisory-ID:  0xCERT-2026-0187
Severity:     Medium
Published:    2026-10-06T15:22:29.000Z
Updated:      2026-10-08T22:46:40.441Z
Chains:       Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0187

Title: Vyper: Memory corruption using function calls within tuples / nested calls

Summary
- -------
Vyper: Memory corruption using function calls within tuples / nested calls. When performing a function call inside a tuple or as an argument inside another function call, there is a memory corruption issue that occurs because of an incorrect pointer to the the tip of the stack.

Details
- -------
Summary
When performing a function call inside a tuple or as an argument inside another function call, there is a memory corruption issue that occurs because of an incorrect pointer to the the tip of the stack.

Affected
- - vyper (pip) < 0.2.6 — fixed in 0.2.6

Severity
Medium (CVSS 6.9), as rated by the upstream advisory.

Recommended actions
- - Upgrade vyper to 0.2.6 or later

Source & attribution
This 0xCERT advisory summarises GHSA-2r3x-4mrv-mcxf from the GitHub Advisory Database: https://github.com/advisories/GHSA-2r3x-4mrv-mcxf. Details may change; refer to the original source for the authoritative record.

References
- ----------
- - https://github.com/advisories/GHSA-2r3x-4mrv-mcxf
- - https://github.com/vyperlang/vyper/security/advisories/GHSA-2r3x-4mrv-mcxf
- - https://github.com/vyperlang/vyper/pull/2186
- - https://github.com/vyperlang/vyper/commit/74ba67d4bec5f8be4f05759e37d2bfb1463e0441
- - https://github.com/vyperlang/vyper/releases/tag/v0.2.6

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrIO28JEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmf92UPG8PS3goPpItgh012YQj8p8Qv6XhezUnhM
4BH/cxYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAAAYEQD/bE+04J3kc4VzHyZp
zb8DAI4Z0Y1nN863XGlBw/x2WzkBAOdufnACuksbwOQaeWzRPVL5b819pd7I
H0auLLIpd2QD
=EaTG
-----END PGP SIGNATURE-----