Impact

The bug can only be exposed with a very specific pattern in Yul:

f(a(),b())
check_if_a_executed_last()

After the fix, expressions are now evaluated in the correct order.

Analysis has shown that no contracts were affected by the date of publishing this advisory.

Patches

Fixed in version 1.3.10.

Workarounds

Upgrading and redeploying affected contracts is the only way.