CVE-2026-3298

EUVD-2026-24136
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
PSFCNA
8.8 HIGH
NETWORK
LOW
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 32.34%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
pythoncpython
𝑥
< 3.11.16
CNA
pythoncpython
3.12.0 ≤
𝑥
< 3.12.14
CNA
pythoncpython
3.13.0 ≤
𝑥
< 3.13.14
CNA
Debian logo
Debian Releases
Debian Product
Codename
python3.11
bookworm
3.11.2-6+deb12u8
fixed
bookworm (security)
3.11.2-6+deb12u3
fixed
python3.13
forky
3.13.15-1
fixed
sid
3.13.15-1
fixed
trixie
3.13.5-2+deb13u3
fixed
python3.14
forky
3.14.6-1
fixed
sid
3.14.7-1
fixed
python3.9
bullseye
3.9.2-1
fixed
bullseye (security)
3.9.2-1+deb11u7
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python2.7
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
dne
questing
dne
resolute
dne
trusty
not-affected
xenial
not-affected
python3.4
jammy
dne
noble
dne
questing
dne
resolute
dne
trusty
not-affected
python3.5
jammy
dne
noble
dne
questing
dne
resolute
dne
trusty
not-affected
xenial
not-affected
python3.6
bionic
not-affected
jammy
dne
noble
dne
questing
dne
resolute
dne
python3.7
bionic
not-affected
jammy
dne
noble
dne
questing
dne
resolute
dne
python3.8
bionic
not-affected
focal
not-affected
jammy
dne
noble
dne
questing
dne
resolute
dne
python3.9
focal
not-affected
jammy
dne
noble
dne
questing
dne
resolute
dne
python3.10
jammy
not-affected
noble
dne
questing
dne
resolute
dne
python3.11
jammy
not-affected
noble
dne
questing
dne
resolute
dne
python3.12
jammy
dne
noble
not-affected
questing
dne
resolute
dne
python3.13
jammy
dne
noble
dne
questing
not-affected
resolute
dne
python3.14
jammy
dne
noble
dne
questing
not-affected
resolute
not-affected
Common Weakness Enumeration
References
https://github.com/python/cpython/commit/1274766d3c29007ab77245a72abbf8dce2a9db4d
https://github.com/python/cpython/commit/27522b7d6e6588f03e61099dd858cd5a9314e2f2
https://github.com/python/cpython/commit/6c8b85b3f1d83d5697ec19880960e1eacee56688
https://github.com/python/cpython/commit/95633d2aad4721e25e4dfd9f43dfb6e1edcbd741
https://github.com/python/cpython/commit/f5ca38739241fe7a40a4b116d5a8a1364dd6fea7
https://github.com/python/cpython/issues/148808
https://github.com/python/cpython/pull/148809
https://mail.python.org/archives/list/security-announce@python.org/thread/KWTPIQBOOOUNQP7UFSLBI437NJDFLA3F/