CVE-2014-4616
python: missing boundary check in JSON module
Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.
CVSS 3.1 · 5.9 Medium
EPSS 7.8%
KEV · Not listed
Vendors
Products