CVE-2022-48560

CVE-2022-48560 is a Python heapq.use-after-free in heappushpop affecting Python 3.9 and earlier. Multiple connected advisories confirm the issue in heapq’s heappushpop and note fixes/updates across distributions (e.g., Python 3.7.x-3.x patches in Debian/AlmaLinux, CloudLinux, etc.). Impact specif...

CVE-2022-48560

A use-after-free exists in Python through 3.9 via heappushpop in heapq...

CVE-2022-48560

A use-after-free exists in Python through 3.9 via heappushpop in heapq...

Python 资源管理错误漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python 3.9, which stems from a post-release reuse issue with heappushpop in hea...

PT-2020-6972 · Python +9 · Python +9

Name of the Vulnerable Software and Affected Versions: Python versions prior to 3.9 Description: A use-after-free issue exists in the Python programming language, which can be exploited to cause a denial of service. This issue is related to the heappushpop function in the heapq module...