https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:45:08.881764+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2337 ALSA-2024:2337 — Moderate: python3.11-cryptography security update 2026-10-03T02:45:10.429354+00:00

Affected: AlmaLinux:9: python3.11-cryptography

The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers.

Security Fix(es):

* python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-02534 bdu:2024-02534 2026-10-03T02:45:10.429436+00:00 bdu:2024-02534 https://cve.radiocsirt.org/vuln/bell-cve-2023-49083 BELL-CVE-2023-49083 2026-10-03T02:45:10.429466+00:00

Affected: Alpaquita:23: py3-cryptography, Alpaquita:stream: py3-cryptography

 https://cve.radiocsirt.org/vuln/brew-azure-cli-cve-2023-49083 BREW-azure-cli-CVE-2023-49083 — cryptography vulnerable to NULL-dereference when loading PKCS7 certificates 2026-10-03T02:45:10.429503+00:00

Affected: Homebrew: azure-cli

### Summary

Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault.

### PoC Here is a Python code that triggers the issue: ```python from cryptography.hazmat.primitives.serialization.pkcs7 import load_der_pkcs7_certificates, load_pem_pkcs7_certificates

pem_p7 = b""" -----BEGIN PKCS7----- MAsGCSqGSIb3DQEHAg== -----END PKCS7----- """

der_p7 = b"\x30\x0B\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x07\x02"

load_pem_pkcs7_certificates(pem_p7) load_der_pkcs7_certificates(der_p7) ```

### Impact Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0297 certfr-2024-avi-0297 — De multiples vulnérabilités ont été découvertes dans Juniper. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-03T02:45:10.429557+00:00 certfr-2024-avi-0297 https://cve.radiocsirt.org/vuln/euvd-2026-264040 EUVD-2026-264040 2026-10-03T02:45:10.429585+00:00 EUVD-2026-264040 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49083 fkie_cve-2023-49083 2026-10-03T02:45:10.429605+00:00

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.

 https://cve.radiocsirt.org/vuln/ghsa-jfhm-5ghh-2f97 GHSA-jfhm-5ghh-2f97 — cryptography vulnerable to NULL-dereference when loading PKCS7 certificates 2026-10-03T02:45:10.429640+00:00

Affected: PyPI: cryptography

### Summary

Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault.

### PoC Here is a Python code that triggers the issue: ```python from cryptography.hazmat.primitives.serialization.pkcs7 import load_der_pkcs7_certificates, load_pem_pkcs7_certificates

pem_p7 = b""" -----BEGIN PKCS7----- MAsGCSqGSIb3DQEHAg== -----END PKCS7----- """

der_p7 = b"\x30\x0B\x06\x09\x2A\x86\x48\x86\xF7\x0D\x01\x07\x02"

load_pem_pkcs7_certificates(pem_p7) load_der_pkcs7_certificates(der_p7) ```

### Impact Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability.

 https://cve.radiocsirt.org/vuln/gsd-2023-49083 gsd-2023-49083 2026-10-03T02:45:10.429695+00:00 gsd-2023-49083 https://cve.radiocsirt.org/vuln/msrc_cve-2023-49083 msrc_CVE-2023-49083 — cryptography vulnerable to NULL-dereference when loading PKCS7 certificates 2026-10-03T02:45:10.429720+00:00 msrc_CVE-2023-49083 https://cve.radiocsirt.org/vuln/oesa-2023-1887 OESA-2023-1887 — python-cryptography security update 2026-10-03T02:45:10.429755+00:00

Affected: openEuler:20.03-LTS-SP1: python-cryptography, openEuler:20.03-LTS-SP3: python-cryptography, openEuler:22.03-LTS: python-cryptography, openEuler:22.03-LTS-SP1: python-cryptography, openEuler:22.03-LTS-SP2: python-cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fix(es): cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.(CVE-2023-49083)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13472-1 openSUSE-SU-2024:13472-1 — python310-cryptography-41.0.7-1.1 on GA media 2026-10-03T02:45:10.429821+00:00

python310-cryptography-41.0.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2023-254 PYSEC-2023-254 2026-10-03T02:45:10.429861+00:00

Affected: PyPI: cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.

 https://cve.radiocsirt.org/vuln/rhsa-2024:10965 RHSA-2024:10965 — Red Hat Security Advisory: python3.11-cryptography security update 2026-10-03T02:45:10.429900+00:00

python-cryptography: NULL-dereference when loading PKCS7 certificates

 https://cve.radiocsirt.org/vuln/suse-su-2023:4844-1 SUSE-SU-2023:4844-1 — Security update for python-cryptography 2026-10-03T02:45:10.429930+00:00

Security update for python-cryptography

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-49083 UBUNTU-CVE-2023-49083 2026-10-03T02:45:10.429957+00:00

Affected: Ubuntu:22.04:LTS: python-cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0869 WID-SEC-W-2024-0869 — Oracle Communications: Mehrere Schwachstellen 2026-10-03T02:45:10.429994+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.