Lucene search

K
osvGoogleOSV:PSF-2022-11
HistoryOct 21, 2022 - 12:00 a.m.

Buffer overflow in the _sha3 module in Python 3.10 and older

2022-10-2100:00:00
Google
osv.dev
5

9.9 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.5%

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.