CVE-2016-5636

CRITICAL

CPython <2.7.12, <3.4.5, <3.5.2 - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-5636. PoCs published by insuyun.

AI-analyzed exploit summary This repository contains functional exploit code for CVE-2016-5636, a heap overflow vulnerability in Python 3.6's zipimport module. It includes a crash PoC via a malformed ZIP file and a local exploit for spawning a shell.

Description

Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.

Exploits (1)

nomisec WORKING POC 4 stars
by insuyun · poc
https://github.com/insuyun/CVE-2016-5636

This repository contains functional exploit code for CVE-2016-5636, a heap overflow vulnerability in Python 3.6's zipimport module. It includes a crash PoC via a malformed ZIP file and a local exploit for spawning a shell.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Python 3.6 (zipimport module)
No auth needed
Prerequisites: Python 3.6 environment · Ability to execute Python scripts
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (15)

Core 15
Core References
Various Sources x_refsource_confirm
http://www.splunk.com/view/SP-CAAAPUE
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/06/16/1
Various Sources x_refsource_confirm
http://www.splunk.com/view/SP-CAAAPSV
Mailing List mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html
Issue Tracking, Patch x_refsource_confirm
https://bugs.python.org/issue26171
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1038138
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/91247
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201701-18
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/06/15/15
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2016-2586.html

Scores

CVSS v3 9.8
EPSS 0.4512
EPSS Percentile 97.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-190
Status published
Products (30)
python/python 3.0
python/python 3.0.1
python/python 3.1.0
python/python 3.1.1
python/python 3.1.2
python/python 3.1.3
python/python 3.1.4
python/python 3.1.5
python/python 3.2.0
python/python 3.2.1
... and 20 more
Published Sep 02, 2016
Tracked Since Feb 18, 2026