CVE-2026-6100
EUVD-2026-2202813.04.2026, 18:16
Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:3.12.12-3.el10_1.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:3.12.13-2.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:3.14.4-2.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:3.12.9-2.el10_0.9 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:3.12.13-2.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:3.11.13-7.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:3.6.8-76.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:3.6.8-39.el8_4.11 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | 0:3.6.8-39.el8_4.11 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 0:3.6.8-47.el8_6.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | 0:3.6.8-47.el8_6.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | 0:3.6.8-47.el8_6.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:3.6.8-51.el8_8.15 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:3.11.2-2.el8_8.10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:3.6.8-51.el8_8.15 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:3.11.2-2.el8_8.10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.12.12-4.el9_7.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.12.13-2.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.11.13-5.3.el9_7 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.11.13-9.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.9.25-3.el9_7.3 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.9.25-7.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.14.4-2.el9_8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | 0:3.9.10-4.el9_0.11 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:3.11.2-2.el9_2.12 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:3.9.16-1.el9_2.14 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | 0:3.11.7-1.el9_4.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | 0:3.12.1-4.el9_4.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | 0:3.9.18-3.el9_4.13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:3.11.11-2.el9_6.7 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:3.12.9-1.el9_6.8 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:3.9.21-2.el9_6.6 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325677 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325711 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325710 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-3.1777325680 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325709 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325680 ≤ 𝑥 < * | ADP |
| Red Hat | RHEL-8 based Middleware Containers | 7.13.5-4.1777325708 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.2 | 1780681984 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782352950 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782352919 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782353093 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat AI Inference Server 3.3 | 1782352847 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776871984 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776871985 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776872005 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776773390 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776871987 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776773505 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | 1776938871 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 3.13.13-1.1.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 3.11.15-4.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 3.12.13-3.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 3.14.4-2.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1777459441 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1777454300 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1777459504 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1779798159 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1779798164 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1779798165 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1779798222 ≤ 𝑥 < * | ADP |
| python | cpython | 𝑥 < 3.10.21 | CNA |
| python | cpython | 3.11.0 ≤ 𝑥 < 3.11.16 | CNA |
| python | cpython | 3.12.0 ≤ 𝑥 < 3.12.14 | CNA |
| python | cpython | 3.13.0 ≤ 𝑥 < 3.13.14 | CNA |
Debian Releases
Debian Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| pypy3 |
| ||||||||||||
| python2.7 |
| ||||||||||||
| python3.11 |
| ||||||||||||
| python3.13 |
| ||||||||||||
| python3.14 |
| ||||||||||||
| python3.9 |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| pypy3 |
| ||||||||||||||||
| python3.10 |
| ||||||||||||||||
| python3.12 |
| ||||||||||||||||
| python3.13 |
| ||||||||||||||||
| python3.14 |
| ||||||||||||||||
| python2.7 |
| ||||||||||||||||
| python3.11 |
| ||||||||||||||||
| python3.4 |
| ||||||||||||||||
| python3.5 |
| ||||||||||||||||
| python3.6 |
| ||||||||||||||||
| python3.7 |
| ||||||||||||||||
| python3.8 |
| ||||||||||||||||
| python3.9 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libpython2_7-1_0 |
| ||||||||||||||||
| libpython2_7-1_0-32bit |
| ||||||||||||||||
| libpython3_10-1_0 |
| ||||||||||||||||
| libpython3_11-1_0 |
| ||||||||||||||||
| libpython3_12-1_0 |
| ||||||||||||||||
| libpython3_13-1_0 |
| ||||||||||||||||
| libpython3_4m1_0 |
| ||||||||||||||||
| libpython3_4m1_0-32bit |
| ||||||||||||||||
| libpython3_6m1_0 |
| ||||||||||||||||
| libpython3_9-1_0 |
| ||||||||||||||||
| python |
| ||||||||||||||||
| python-32bit |
| ||||||||||||||||
| python-base |
| ||||||||||||||||
| python-base-32bit |
| ||||||||||||||||
| python-curses |
| ||||||||||||||||
| python-demo |
| ||||||||||||||||
| python-devel |
| ||||||||||||||||
| python-doc |
| ||||||||||||||||
| python-doc-pdf |
| ||||||||||||||||
| python-gdbm |
| ||||||||||||||||
| python-idle |
| ||||||||||||||||
| python-tk |
| ||||||||||||||||
| python-xml |
| ||||||||||||||||
| python3 |
| ||||||||||||||||
| python3-base |
| ||||||||||||||||
| python3-curses |
| ||||||||||||||||
| python3-dbm |
| ||||||||||||||||
| python3-devel |
| ||||||||||||||||
| python3-idle |
| ||||||||||||||||
| python3-tk |
| ||||||||||||||||
| python3-tools |
| ||||||||||||||||
| python310 |
| ||||||||||||||||
| python310-base |
| ||||||||||||||||
| python310-curses |
| ||||||||||||||||
| python310-dbm |
| ||||||||||||||||
| python310-devel |
| ||||||||||||||||
| python310-idle |
| ||||||||||||||||
| python310-tk |
| ||||||||||||||||
| python310-tools |
| ||||||||||||||||
| python311 |
| ||||||||||||||||
| python311-base |
| ||||||||||||||||
| python311-curses |
| ||||||||||||||||
| python311-dbm |
| ||||||||||||||||
| python311-devel |
| ||||||||||||||||
| python311-doc |
| ||||||||||||||||
| python311-doc-devhelp |
| ||||||||||||||||
| python311-idle |
| ||||||||||||||||
| python311-tk |
| ||||||||||||||||
| python311-tools |
| ||||||||||||||||
| python312 |
| ||||||||||||||||
| python312-base |
| ||||||||||||||||
| python312-curses |
| ||||||||||||||||
| python312-dbm |
| ||||||||||||||||
| python312-devel |
| ||||||||||||||||
| python312-idle |
| ||||||||||||||||
| python312-tk |
| ||||||||||||||||
| python312-tools |
| ||||||||||||||||
| python313 |
| ||||||||||||||||
| python313-base |
| ||||||||||||||||
| python313-curses |
| ||||||||||||||||
| python313-dbm |
| ||||||||||||||||
| python313-devel |
| ||||||||||||||||
| python313-idle |
| ||||||||||||||||
| python313-tk |
| ||||||||||||||||
| python313-tools |
| ||||||||||||||||
| python36 |
| ||||||||||||||||
| python36-base |
| ||||||||||||||||
| python36-curses |
| ||||||||||||||||
| python36-dbm |
| ||||||||||||||||
| python36-devel |
| ||||||||||||||||
| python36-idle |
| ||||||||||||||||
| python36-testsuite |
| ||||||||||||||||
| python36-tk |
| ||||||||||||||||
| python36-tools |
| ||||||||||||||||
| python39 |
| ||||||||||||||||
| python39-base |
| ||||||||||||||||
| python39-curses |
| ||||||||||||||||
| python39-dbm |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| platform-python |
| ||||||||||||||||
| platform-python-debug |
| ||||||||||||||||
| platform-python-devel |
| ||||||||||||||||
| python-unversioned-command |
| ||||||||||||||||
| python3 |
| ||||||||||||||||
| python3-debug |
| ||||||||||||||||
| python3-devel |
| ||||||||||||||||
| python3-idle |
| ||||||||||||||||
| python3-libs |
| ||||||||||||||||
| python3-test |
| ||||||||||||||||
| python3-tkinter |
| ||||||||||||||||
| python3.11 |
| ||||||||||||||||
| python3.11-debug |
| ||||||||||||||||
| python3.11-devel |
| ||||||||||||||||
| python3.11-idle |
| ||||||||||||||||
| python3.11-libs |
| ||||||||||||||||
| python3.11-rpm-macros |
| ||||||||||||||||
| python3.11-test |
| ||||||||||||||||
| python3.11-tkinter |
| ||||||||||||||||
| python3.12 |
| ||||||||||||||||
| python3.12-debug |
| ||||||||||||||||
| python3.12-devel |
| ||||||||||||||||
| python3.12-idle |
| ||||||||||||||||
| python3.12-libs |
| ||||||||||||||||
| python3.12-rpm-macros |
| ||||||||||||||||
| python3.12-test |
| ||||||||||||||||
| python3.12-tkinter |
| ||||||||||||||||
| python3.14 |
| ||||||||||||||||
| python3.14-debug |
| ||||||||||||||||
| python3.14-devel |
| ||||||||||||||||
| python3.14-freethreading |
| ||||||||||||||||
| python3.14-freethreading-debug |
| ||||||||||||||||
| python3.14-freethreading-devel |
| ||||||||||||||||
| python3.14-freethreading-idle |
| ||||||||||||||||
| python3.14-freethreading-libs |
| ||||||||||||||||
| python3.14-freethreading-test |
| ||||||||||||||||
| python3.14-freethreading-tkinter |
| ||||||||||||||||
| python3.14-idle |
| ||||||||||||||||
| python3.14-libs |
| ||||||||||||||||
| python3.14-test |
| ||||||||||||||||
| python3.14-tkinter |
|
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| python |
| ||||
| python-debug |
| ||||
| python-debuginfo |
| ||||
| python-devel |
| ||||
| python-libs |
| ||||
| python-test |
| ||||
| python-tools |
| ||||
| python-unversioned-command |
| ||||
| python3 |
| ||||
| python3-debug |
| ||||
| python3-debuginfo |
| ||||
| python3-devel |
| ||||
| python3-idle |
| ||||
| python3-libs |
| ||||
| python3-test |
| ||||
| python3-tkinter |
| ||||
| python3-tools |
| ||||
| python3.11 |
| ||||
| python3.11-debug |
| ||||
| python3.11-debuginfo |
| ||||
| python3.11-debugsource |
| ||||
| python3.11-devel |
| ||||
| python3.11-idle |
| ||||
| python3.11-libs |
| ||||
| python3.11-test |
| ||||
| python3.11-tkinter |
| ||||
| python3.12 |
| ||||
| python3.12-debug |
| ||||
| python3.12-debuginfo |
| ||||
| python3.12-debugsource |
| ||||
| python3.12-devel |
| ||||
| python3.12-idle |
| ||||
| python3.12-libs |
| ||||
| python3.12-test |
| ||||
| python3.12-tkinter |
| ||||
| python3.13 |
| ||||
| python3.13-debug |
| ||||
| python3.13-debuginfo |
| ||||
| python3.13-debugsource |
| ||||
| python3.13-devel |
| ||||
| python3.13-freethreading |
| ||||
| python3.13-freethreading-debug |
| ||||
| python3.13-idle |
| ||||
| python3.13-libs |
| ||||
| python3.13-test |
| ||||
| python3.13-tkinter |
| ||||
| python3.14 |
| ||||
| python3.14-debug |
| ||||
| python3.14-debuginfo |
| ||||
| python3.14-debugsource |
| ||||
| python3.14-devel |
| ||||
| python3.14-freethreading |
| ||||
| python3.14-freethreading-debug |
| ||||
| python3.14-freethreading-devel |
| ||||
| python3.14-freethreading-idle |
| ||||
| python3.14-freethreading-libs |
| ||||
| python3.14-freethreading-test |
| ||||
| python3.14-freethreading-tkinter |
| ||||
| python3.14-idle |
| ||||
| python3.14-libs |
| ||||
| python3.14-test |
| ||||
| python3.14-tkinter |
| ||||
| python3.9-debuginfo |
| ||||
| python3.9-debugsource |
| ||||
| tkinter |
|
Common Weakness Enumeration
References