glvd logo
glvd logo
Garden Linux Vulnerability Database
CVE Description

"Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.

The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable."

Metadata

Vulnerability Status Published Date Modified Date Ingested Date
Received 2026-04-13T18:16:31.297 2026-04-14T15:16:41.247 2026-04-14 15:16:41.247+00

CVSS Scores

CVSS Version Base Score DEB CVSS Severity Vector String
4.0 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected Linux Images

Distro Version Source Package Package Version Is Vulnerable Is fixed in Version
debian_linux 13 pypy3 7.3.19+dfsg-2 true
debian_linux 13 python3.13 3.13.5-2 true
debian_linux 12 pypy3 7.3.11+dfsg-2+deb12u3 true
gardenlinux kvm-cilium-k3s-1862.0-6be879c6 python3.13 3.13.3-2gl0 true
gardenlinux kvm-gardener-1862.0-6be879c6 python3.13 3.13.3-2gl0 true
gardenlinux pt-gardener-nvgpu-1862.0-6be879c6 python3.13 3.13.3-2gl0 true
gardenlinux metal-cilium-k3s-osc-ucode-vhost-1862.0-6be879c6 python3.13 3.13.3-2gl0 true
gardenlinux metal-cilium-k3s-osc-ucode-1862.0-6be879c6 python3.13 3.13.3-2gl0 true
gardenlinux metal-cilium-k3s-osc-router-ucode-1862.0-6be879c6 python3.13 3.13.3-2gl0 true
debian_linux 14 pypy3 7.3.21+dfsg-4 true
debian_linux 14 python3.13 3.13.12-1 true
debian_linux 14 python3.14 3.14.3-3 true