CVE-2016-5636
CRITICALCPython <2.7.12, <3.4.5, <3.5.2 - Buffer Overflow
Title source: llmDescription
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
Exploits (1)
References (15)
Scores
CVSS v3
9.8
EPSS
0.3859
EPSS Percentile
97.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-190
Status
published
Products (30)
python/python
3.0
python/python
3.0.1
python/python
3.1.0
python/python
3.1.1
python/python
3.1.2
python/python
3.1.3
python/python
3.1.4
python/python
3.1.5
python/python
3.2.0
python/python
3.2.1
... and 20 more
Published
Sep 02, 2016
Tracked Since
Feb 18, 2026