Lucene search
+L

34 matches found

osv_bit
osv_bit
•added 2026/09/11 5:56 a.m.•26 views

BIT-PYTHON-MIN-2026-15310 zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

2.1CVSS6AI score0.00526EPSS
SaveExploits0References14
Rows per page
Query Builder