Buffer overflow in Python Software Foundation Cpython
CVE-2026-3298
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer…
Vulnerability class: Buffer Overflow
EPSS: 0.004 (29.8th percentile) — read the EPSS interpretation.
Affected products
- Python Software Foundation Cpython — versions 3.14.0a1, 3.11.0, 3.15.0a1
Weakness classification (CWE)
References
- cna@python.org (patch)
- cna@python.org (issue-tracking)
- cna@python.org (vendor-advisory)
- cna@python.org (patch)
- cna@python.org (patch)
- cna@python.org (patch)