Is CVE-2023-41052 actively exploited?

No active exploitation of CVE-2023-41052 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2023-41052 be exploited remotely?

Yes. CVE-2023-41052 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2023-41052?

CVE-2023-41052 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2023-41052

MEDIUM

CVE-2023-41052

CWE-670Published: September 4, 2023· Updated: Jun 17, 2026

5.3

CVSS v3.1

Official Description

Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions `uint256_addmod`, `uint256_mulmod`, `ecadd` and `ecmul` does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side effects that other arguments depend on. A patch is currently being developed on pull request #3583. When using builtins from the list above, users should make sure that the arguments of the expression do not produce side effects or, if one does, that no other argument is dependent on those side effects.

NVD Source

Technical Analysis

CVE-2023-41052 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.