CVE-2022-48560

python: use after free in heappushpop() of heapq module

Published Aug 22, 2023 CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Description
A use-after-free exists in Python through 3.9 via heappushpop in heapq.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3575-1 python2.7 security update
Debian DLA Debian DLA DLA-3614-1 python3.7 security update
EUVD EUVD EUVD-2022-51256 A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Ubuntu USN Ubuntu USN USN-6394-1 Python vulnerability
Ubuntu USN Ubuntu USN USN-6394-2 Python vulnerability
Ubuntu USN Ubuntu USN USN-6891-1 Python vulnerabilities
Ubuntu USN Ubuntu USN USN-7180-1 Python vulnerabilities
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Nov 2, 2026, 10:15 PM
Reserved
Jul 23, 2023, 12:00 AM
Status
Modified
Published
Aug 22, 2023, 7:16 PM
Modified
Nov 2, 2026, 11:17 PM
Severity
Moderate
Public date
Aug 22, 2023, 12:00 AM