https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:11:19.825978+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-libpython-2026-3298 BIT-libpython-2026-3298 — Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes 2026-10-03T07:11:19.912537+00:00

Affected: Bitnami: libpython

The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0474 certfr-2026-avi-0474 — Une vulnérabilité a été découverte dans Python. Elle permet à un attaquant de provoquer un problème de sécurité non spé… 2026-10-03T07:11:19.912593+00:00 certfr-2026-avi-0474 https://cve.radiocsirt.org/vuln/euvd-2026-351827 EUVD-2026-351827 2026-10-03T07:11:19.912613+00:00 EUVD-2026-351827 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3298 fkie_cve-2026-3298 2026-10-03T07:11:19.912625+00:00

The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.

 https://cve.radiocsirt.org/vuln/ghsa-3p9c-22jr-wq4x GHSA-3p9c-22jr-wq4x 2026-10-03T07:11:19.912647+00:00

The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-3298 msrc_CVE-2026-3298 — Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes 2026-10-03T07:11:19.912663+00:00 msrc_CVE-2026-3298 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3298 Withdrawn: UBUNTU-CVE-2026-3298 2026-10-03T07:11:19.912679+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.8 and 9 more

The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1222 WID-SEC-W-2026-1222 — CPython: Schwachstelle ermöglicht nicht spezifizierten Angriff 2026-10-03T07:11:19.912725+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CPython ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.