Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/09/11 11:24 p.m.4 views

CVE-2025-59042

PyInstaller bundles a Python application and all its dependencies into a single package. Due to a special entry being appended to sys.path during the bootstrap process of a PyInstaller-frozen application, and due to the bootstrap script attempting to load an optional module for bytecode decryptio...

7CVSS7.6AI score0.00025EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/09/10 11:22 p.m.3 views

SUSE CVE-2025-59042

PyInstaller bundles a Python application and all its dependencies into a single package. Due to a special entry being appended to sys.path during the bootstrap process of a PyInstaller-frozen application, and due to the bootstrap script attempting to load an optional module for bytecode decryptio...

7CVSS7.7AI score0.00025EPSS
Exploits0References3
OSV
OSV
added 2025/09/10 8:30 p.m.2 views

GHSA-P2XP-XX3R-MFFC PyInstaller has local privilege escalation vulnerability

Impact Due to a special entry being appended to sys.path during the bootstrap process of a PyInstaller-frozen application, and due to the bootstrap script attempting to load an optional module for bytecode decryption while this entry is still present in sys.path, an application built with...

7CVSS7.7AI score0.00025EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/09/09 10:28 p.m.7 views

CVE-2025-59042 PyInstaller has local privilege escalation vulnerability

PyInstaller bundles a Python application and all its dependencies into a single package. Due to a special entry being appended to sys.path during the bootstrap process of a PyInstaller-frozen application, and due to the bootstrap script attempting to load an optional module for bytecode decryptio...

7CVSS0.00025EPSS
Exploits0References2
CVE
CVE
added 2025/09/09 10:28 p.m.18 views

CVE-2025-59042

CVE-2025-59042 is a PyInstaller-related issue. In PyInstaller builds older than 6.0.0, the bootstrap process appends a special entry to sys.path and may load an optional bytecode-decryption module, enabling an unprivileged attacker to execute arbitrary Python code if they can place a file/dir nex...

7CVSS7.2AI score0.00025EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.3 views

PT-2025-36997

Name of the Vulnerable Software and Affected Versions: PyInstaller versions prior to 6.0.0 Description: PyInstaller packages Python applications and their dependencies into a single package. A specially crafted entry appended to sys.path during the bootstrap process of a PyInstaller-frozen...

7CVSS7.2AI score0.00025EPSS
Exploits0References7
Rows per page
Query Builder