Lucene search
K

16 matches found

OSV
OSV
added 2026/05/28 3:43 p.m.10 views

RLSA-2026:19175 Important: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

8.1CVSS7.3AI score0.00164EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/20 12:0 a.m.3 views

RHEL 9 : python3.9 (RHSA-2026:19571)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19571 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

9.1CVSS6.4AI score0.00164EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/05/19 6:24 p.m.6 views

python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

A flaw was found in Python's decompression modules, including lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is...

9.1CVSS7.7AI score0.00164EPSS
Exploits0References10
AlmaLinux
AlmaLinux
added 2026/05/19 12:0 a.m.4 views

Important: python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

9.1CVSS7.3AI score0.00164EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2026/05/07 4:55 a.m.7 views

python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

A flaw was found in Python's decompression modules, including lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is...

9.1CVSS6.3AI score0.00164EPSS
Exploits0References10
OSV
OSV
added 2026/04/28 12:3 a.m.1 views

RLSA-2026:10745 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

8.1CVSS6.1AI score0.00164EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2026/04/27 3:0 p.m.1 views

python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

A flaw was found in Python's decompression modules, including lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is...

9.1CVSS6AI score0.00164EPSS
Exploits0References10
AlmaLinux
AlmaLinux
added 2026/04/27 12:0 a.m.2 views

Important: python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

9.1CVSS6AI score0.00164EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/12/09 8:27 a.m.1 views

CVE-2025-66324

Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity...

8.4CVSS6.8AI score0.00009EPSS
Exploits0References1
NVD
NVD
added 2025/12/08 8:15 a.m.3 views

CVE-2025-66324

Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity...

8.4CVSS0.00009EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/08 8:7 a.m.1 views

EUVD-2025-201679

Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity...

8.4CVSS6.3AI score0.00009EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/08 8:7 a.m.1 views

CVE-2025-66324

Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity...

8.4CVSS6.4AI score0.00009EPSS
Exploits0References1
CVE
CVE
added 2025/12/08 8:7 a.m.7 views

CVE-2025-66324

The CVE-2025-66324 entry concerns Huawei HarmonyOS with an input verification flaw in the compression/decompression module. The root cause is improper input validation. Impact is on app data integrity; CVSS/metrics in the sources indicate high integrity/overall risk, though explicit affected vers...

8.4CVSS6.4AI score0.00009EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/08 8:7 a.m.20 views

CVE-2025-66324

Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity...

8.4CVSS0.00009EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.1 views

PT-2025-49521

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An input verification issue exists in the compression and decompression module. Successful exploitation could impact app data integrity. Recommendations At the moment, there is no information about a...

8.4CVSS6.3AI score0.00009EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.1 views

BBOT 安全漏洞

BBOT is an open source recursive Internet scanner from Black Lantern Security. A security vulnerability exists in BBOT that stems from the decompression module's handling of malicious compressed files that could lead to arbitrary file writes, which could trigger remote code execution...

9.6CVSS7.7AI score0.00301EPSS
Exploits0References2
Rows per page
Query Builder