Lucene search
+L

429 matches found

OSV
OSV
added 2026/08/31 10:49 a.m.6 views

BIT-PYTHON-2026-15310 zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

2.1CVSS5.9AI score0.00304EPSS
SaveExploits0References6
Rows per page
Query Builder