CVE-2025-4435 — Incorrect Calculation in Software Foundation Cpython

CWE-682 — Incorrect CalculationCWE-706 — Use of Incorrectly-Resolved Name or ReferenceCWE-667 — Improper Locking10 documents9 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 32.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Python Software Foundation Cpython
Timeline
PublishedJun 3
Latest updateJun 19

Description

When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶CVEListV5python_software_foundation/cpython3.10.0 — 3.10.18+5

🔴Vulnerability Details

3
OSV
CVE-2025-4435: When using a TarFile↗2025-06-03
▶
GHSA
GHSA-p72v-37h5-753v: When using a TarFile↗2025-06-03
▶
CVEList
Tarfile extracts filtered members when errorlevel=0↗2025-06-03
▶

💥Exploits & PoCs

1
Exploit-DB
VirtualBox 7.0.16 - Privilege Escalation↗2025-05-09
▶

📋Vendor Advisories

5
Ubuntu
Python vulnerabilities↗2025-06-19
▶
Microsoft
Tarfile extracts filtered members when errorlevel=0↗2025-06-10
▶
Red Hat
cpython: Tarfile extracts filtered members when errorlevel=0↗2025-06-03
▶
Red Hat
kernel: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback↗2025-04-01
▶
Debian
CVE-2025-4435: jython - When using a TarFile.errorlevel = 0 and extracting with a filter the documented ...↗2025
▶
CVE-2025-4435 — Incorrect Calculation | cvebase