CVE-2026-3298
published 2026-04-21CVE-2026-3298: The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter…
PriorityP353high8.8CVSS 4.0
AVNACLATNPRNUINVCLVILVAHSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.60%
48.3th percentile
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| python_software_foundation | cpython | < 3.11.16 | 3.11.16 |
| python_software_foundation | cpython | >= 3.12.0 < 3.12.14 | 3.12.14 |
| python_software_foundation | cpython | >= 3.13.0 < 3.13.14 | 3.13.14 |
| python_software_foundation | cpython | >= 3.14.0a1 < 3.14.5rc1 | 3.14.5rc1 |
| python_software_foundation | cpython | >= 3.15.0a1 < 3.15.0b1 | 3.15.0b1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3p9c-22jr-wq4x: The method "sock_recvfrom_into()" of "asyncio
ghsa_unreviewed·2026-04-21
CVE-2026-3298 [HIGH] CWE-787 GHSA-3p9c-22jr-wq4x: The method "sock_recvfrom_into()" of "asyncio
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.
VulDB
Python CPython up to 3.14.x on Windows sock_recvfrom_into nbytes out-of-bounds write (ID 148808)
vuldb·2026-04-21·CVSS 8.8
CVE-2026-3298 [HIGH] Python CPython up to 3.14.x on Windows sock_recvfrom_into nbytes out-of-bounds write (ID 148808)
A vulnerability classified as critical was found in Python CPython up to 3.14.x on Windows. This affects the function sock_recvfrom_into. Executing a manipulation of the argument nbytes can lead to out-of-bounds write.
This vulnerability appears as CVE-2026-3298. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is advised.
GHSA
ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
ghsa·2026-02-25
CVE-2026-25984 [LOW] CWE-125 ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
An integer overflow in the PSB (PSD v2) RLE decoding path causes a heap out-of-bounds read on 32-bit builds. This can lead to information disclosure or a crash when processing crafted PSB files.
```
==3298==ERROR: AddressSanitizer: heap-buffer-overflow on address 0xf512eb00 at pc 0xf76760b5 bp 0xffc1dfb8 sp 0xffc1dfa8
READ of size 8 at 0xf512eb00 thread T0
#0 0xf76760b4 in ReadPSDChannelRLE coders/psd.c:1141
```
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/python/cpython/commit/1274766d3c29007ab77245a72abbf8dce2a9db4dhttps://github.com/python/cpython/commit/27522b7d6e6588f03e61099dd858cd5a9314e2f2https://github.com/python/cpython/commit/6c8b85b3f1d83d5697ec19880960e1eacee56688https://github.com/python/cpython/commit/95633d2aad4721e25e4dfd9f43dfb6e1edcbd741https://github.com/python/cpython/commit/f5ca38739241fe7a40a4b116d5a8a1364dd6fea7https://github.com/python/cpython/issues/148808https://github.com/python/cpython/pull/148809https://mail.python.org/archives/list/[email protected]/thread/KWTPIQBOOOUNQP7UFSLBI437NJDFLA3F/
2026-04-21
Published