CVE-2026-3446

EUVD-2026-21545
When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use "validate=True" to enable stricter processing of base64 data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
PSFCNA
6 MEDIUM
NETWORK
HIGH
LOW
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 8.74%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
pythoncpython
𝑥
< 3.13.13
CNA
pythoncpython
3.14.0 ≤
𝑥
< 3.14.4
CNA
Debian logo
Debian Releases
Debian Product
Codename
python2.7
bullseye
vulnerable
python3.11
bookworm
ignored
bookworm (security)
vulnerable
python3.13
forky
3.13.14-1
fixed
sid
3.13.15-1
fixed
trixie
3.13.5-2+deb13u3
fixed
python3.14
forky
3.14.6-1
fixed
sid
3.14.7-1
fixed
python3.9
bullseye
ignored
bullseye (security)
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
pypy3
focal
needs-triage
jammy
needs-triage
noble
needs-triage
questing
ignored
resolute
needs-triage
python3.10
jammy
ignored
noble
dne
questing
dne
resolute
dne
python3.12
jammy
dne
noble
ignored
questing
dne
resolute
dne
python3.13
jammy
dne
noble
dne
questing
ignored
resolute
dne
python3.14
jammy
dne
noble
dne
questing
ignored
resolute
not-affected
python2.7
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
dne
questing
dne
resolute
dne
trusty
needs-triage
xenial
needs-triage
python3.11
jammy
needs-triage
noble
dne
questing
dne
resolute
dne
python3.4
jammy
dne
noble
dne
questing
dne
resolute
dne
trusty
needs-triage
python3.5
jammy
dne
noble
dne
questing
dne
resolute
dne
trusty
needs-triage
xenial
needs-triage
python3.6
bionic
needs-triage
jammy
dne
noble
dne
questing
dne
resolute
dne
python3.7
bionic
needs-triage
jammy
dne
noble
dne
questing
dne
resolute
dne
python3.8
bionic
needs-triage
focal
needs-triage
jammy
dne
noble
dne
questing
dne
resolute
dne
python3.9
focal
needs-triage
jammy
dne
noble
dne
questing
dne
resolute
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libpython2_7-1_0
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
libpython2_7-1_0-32bit
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
libpython3_10-1_0
suse enterprise server 15 SP4
3.10.20-150400.4.112.1
fixed
libpython3_11-1_0
suse enterprise desktop 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise sap 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise sap 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise server 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise server 15 SP7
3.11.15-150600.3.56.1
fixed
libpython3_13-1_0
suse enterprise desktop 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise sap 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise server 15 SP7
3.13.13-150700.4.50.1
fixed
libpython3_4m1_0
suse enterprise server 12 SP3
3.4.10-25.185.1
fixed
suse enterprise server 12 SP5
3.4.10-25.185.1
fixed
libpython3_4m1_0-32bit
suse enterprise server 12 SP5
3.4.10-25.185.1
fixed
libpython3_6m1_0
suse enterprise desktop 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise sap 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise server 12 SP3
3.6.15-6.154.1
fixed
suse enterprise server 15 SP4
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP5
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP6
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP7
3.6.15-150300.10.118.1
fixed
libpython3_9-1_0
suse enterprise server 15 SP5
3.9.25-150300.4.106.1
fixed
python
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-32bit
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-base
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-base-32bit
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-curses
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-demo
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-devel
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-doc
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-doc-pdf
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-gdbm
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-idle
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-tk
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python-xml
suse enterprise server 12 SP3
2.7.18-28.157.1
fixed
suse enterprise server 12 SP5
2.7.18-33.79.1
fixed
python3
suse enterprise desktop 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise sap 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise server 12 SP3
3.4.10-25.185.1
fixed
suse enterprise server 12 SP5
3.4.10-25.185.1
fixed
suse enterprise server 15 SP4
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP5
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP6
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP7
3.6.15-150300.10.118.1
fixed
python3-base
suse enterprise desktop 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise sap 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise server 12 SP3
3.4.10-25.185.1
fixed
suse enterprise server 12 SP5
3.4.10-25.185.1
fixed
suse enterprise server 15 SP4
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP5
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP6
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP7
3.6.15-150300.10.118.1
fixed
python3-curses
suse enterprise desktop 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise sap 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise server 12 SP3
3.4.10-25.185.1
fixed
suse enterprise server 12 SP5
3.4.10-25.185.1
fixed
suse enterprise server 15 SP4
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP5
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP6
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP7
3.6.15-150300.10.118.1
fixed
python3-dbm
suse enterprise desktop 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise sap 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP4
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP5
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP6
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP7
3.6.15-150300.10.118.1
fixed
python3-devel
suse enterprise desktop 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise sap 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise server 12 SP5
3.4.10-25.185.1
fixed
suse enterprise server 15 SP4
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP5
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP6
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP7
3.6.15-150300.10.118.1
fixed
python3-idle
suse enterprise desktop 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise sap 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP4
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP5
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP6
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP7
3.6.15-150300.10.118.1
fixed
python3-tk
suse enterprise desktop 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise sap 15 SP7
3.6.15-150300.10.118.1
fixed
suse enterprise server 12 SP5
3.4.10-25.185.1
fixed
suse enterprise server 15 SP4
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP5
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP6
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP7
3.6.15-150300.10.118.1
fixed
python3-tools
suse enterprise server 15 SP4
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP5
3.6.15-150300.10.118.1
fixed
suse enterprise server 15 SP6
3.6.15-150300.10.118.1
fixed
python310
suse enterprise server 15 SP4
3.10.20-150400.4.112.1
fixed
python310-base
suse enterprise server 15 SP4
3.10.20-150400.4.112.1
fixed
python310-curses
suse enterprise server 15 SP4
3.10.20-150400.4.112.1
fixed
python310-dbm
suse enterprise server 15 SP4
3.10.20-150400.4.112.1
fixed
python310-devel
suse enterprise server 15 SP4
3.10.20-150400.4.112.1
fixed
python310-idle
suse enterprise server 15 SP4
3.10.20-150400.4.112.1
fixed
python310-tk
suse enterprise server 15 SP4
3.10.20-150400.4.112.1
fixed
python310-tools
suse enterprise server 15 SP4
3.10.20-150400.4.112.1
fixed
python311
suse enterprise desktop 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise sap 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise sap 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise server 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise server 15 SP7
3.11.15-150600.3.56.1
fixed
python311-base
suse enterprise desktop 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise sap 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise sap 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise server 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise server 15 SP7
3.11.15-150600.3.56.1
fixed
python311-curses
suse enterprise desktop 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise sap 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise server 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise server 15 SP7
3.11.15-150600.3.56.1
fixed
python311-dbm
suse enterprise desktop 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise sap 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise server 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise server 15 SP7
3.11.15-150600.3.56.1
fixed
python311-devel
suse enterprise desktop 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise sap 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise server 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise server 15 SP7
3.11.15-150600.3.56.1
fixed
python311-doc
suse enterprise server 15 SP4
3.11.15-150400.9.88.1
fixed
python311-doc-devhelp
suse enterprise server 15 SP4
3.11.15-150400.9.88.1
fixed
python311-idle
suse enterprise desktop 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise sap 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise server 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise server 15 SP7
3.11.15-150600.3.56.1
fixed
python311-tk
suse enterprise desktop 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise sap 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise server 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise server 15 SP7
3.11.15-150600.3.56.1
fixed
python311-tools
suse enterprise desktop 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise sap 15 SP7
3.11.15-150600.3.56.1
fixed
suse enterprise server 15 SP4
3.11.15-150400.9.88.1
fixed
suse enterprise server 15 SP7
3.11.15-150600.3.56.1
fixed
python313
suse enterprise desktop 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise sap 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise server 15 SP7
3.13.13-150700.4.50.1
fixed
python313-base
suse enterprise desktop 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise sap 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise server 15 SP7
3.13.13-150700.4.50.1
fixed
python313-curses
suse enterprise desktop 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise sap 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise server 15 SP7
3.13.13-150700.4.50.1
fixed
python313-dbm
suse enterprise desktop 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise sap 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise server 15 SP7
3.13.13-150700.4.50.1
fixed
python313-devel
suse enterprise desktop 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise sap 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise server 15 SP7
3.13.13-150700.4.50.1
fixed
python313-idle
suse enterprise desktop 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise sap 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise server 15 SP7
3.13.13-150700.4.50.1
fixed
python313-tk
suse enterprise desktop 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise sap 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise server 15 SP7
3.13.13-150700.4.50.1
fixed
python313-tools
suse enterprise desktop 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise sap 15 SP7
3.13.13-150700.4.50.1
fixed
suse enterprise server 15 SP7
3.13.13-150700.4.50.1
fixed
python36
suse enterprise server 12 SP3
3.6.15-6.154.1
fixed
python36-base
suse enterprise server 12 SP3
3.6.15-6.154.1
fixed
python36-curses
suse enterprise server 12 SP3
3.6.15-6.154.1
fixed
python36-dbm
suse enterprise server 12 SP3
3.6.15-6.154.1
fixed
python36-devel
suse enterprise server 12 SP3
3.6.15-6.154.1
fixed
python36-idle
suse enterprise server 12 SP3
3.6.15-6.154.1
fixed
python36-testsuite
suse enterprise server 12 SP3
3.6.15-6.154.1
fixed
python36-tk
suse enterprise server 12 SP3
3.6.15-6.154.1
fixed
python36-tools
suse enterprise server 12 SP3
3.6.15-6.154.1
fixed
python39
suse enterprise server 15 SP5
3.9.25-150300.4.106.1
fixed
python39-base
suse enterprise server 15 SP5
3.9.25-150300.4.106.1
fixed
python39-curses
suse enterprise server 15 SP5
3.9.25-150300.4.106.1
fixed
python39-dbm
suse enterprise server 15 SP5
3.9.25-150300.4.106.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
python
Amazon Linux 2
0:2.7.18-1.amzn2.0.22
fixed
python-debug
Amazon Linux 2
0:2.7.18-1.amzn2.0.22
fixed
python-debuginfo
Amazon Linux 2
0:2.7.18-1.amzn2.0.22
fixed
python-devel
Amazon Linux 2
0:2.7.18-1.amzn2.0.22
fixed
python-libs
Amazon Linux 2
0:2.7.18-1.amzn2.0.22
fixed
python-test
Amazon Linux 2
0:2.7.18-1.amzn2.0.22
fixed
python-tools
Amazon Linux 2
0:2.7.18-1.amzn2.0.22
fixed
python-unversioned-command
Amazon Linux 2023
0:3.9.25-1.amzn2023.0.7
fixed
python3
Amazon Linux 2
0:3.7.16-1.amzn2.0.29
fixed
Amazon Linux 2023
0:3.9.25-1.amzn2023.0.7
fixed
python3-debug
Amazon Linux 2
0:3.7.16-1.amzn2.0.29
fixed
Amazon Linux 2023
0:3.9.25-1.amzn2023.0.7
fixed
python3-debuginfo
Amazon Linux 2
0:3.7.16-1.amzn2.0.29
fixed
python3-devel
Amazon Linux 2
0:3.7.16-1.amzn2.0.29
fixed
Amazon Linux 2023
0:3.9.25-1.amzn2023.0.7
fixed
python3-idle
Amazon Linux 2023
0:3.9.25-1.amzn2023.0.7
fixed
python3-libs
Amazon Linux 2
0:3.7.16-1.amzn2.0.29
fixed
Amazon Linux 2023
0:3.9.25-1.amzn2023.0.7
fixed
python3-test
Amazon Linux 2
0:3.7.16-1.amzn2.0.29
fixed
Amazon Linux 2023
0:3.9.25-1.amzn2023.0.7
fixed
python3-tkinter
Amazon Linux 2
0:3.7.16-1.amzn2.0.29
fixed
Amazon Linux 2023
0:3.9.25-1.amzn2023.0.7
fixed
python3-tools
Amazon Linux 2
0:3.7.16-1.amzn2.0.29
fixed
python3.9-debuginfo
Amazon Linux 2023
0:3.9.25-1.amzn2023.0.7
fixed
python3.9-debugsource
Amazon Linux 2023
0:3.9.25-1.amzn2023.0.7
fixed
tkinter
Amazon Linux 2
0:2.7.18-1.amzn2.0.22
fixed
Common Weakness Enumeration
References
https://github.com/python/cpython/commit/1f9958f909c1b41a4ffc0b613ef8ec8fa5e7c474
https://github.com/python/cpython/commit/4561f6418a691b3e89aef0901f53fe0dfb7f7c0e
https://github.com/python/cpython/commit/e31c55121620189a0d1a07b689762d8ca9c1b7fa
https://github.com/python/cpython/issues/145264
https://github.com/python/cpython/pull/145267
https://mail.python.org/archives/list/security-announce@python.org/thread/F5ZT5ICGJ6CKXVUJ34YBVY7WOZ5SHG53/