CVE-2026-3298
highpriority · track · 0EPSS 0.004 · 33 %ileDEEUFRUSEPSS · scored 2026-10-27
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.8–8.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (19)
Products and version ranges known to be affected.
advisories (7)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-1222CPython: Schwachstelle ermöglicht nicht spezifizierten AngriffDeutsch2026-04-21csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CPython ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
- BIT-libpython-2026-3298Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes2026-07-06vendor · osvUS
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.
- BIT-python-2026-3298Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes2026-07-06vendor · osvUS
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.
- BIT-python-min-2026-3298Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes2026-07-06vendor · osvUS
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.
- CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR
- PSF-0000-CVE-2026-32982026-04-21vendor · osvUS
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.
- PSF-2026-202026-04-21vendor · osvUS
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.
also known as (8)
Other names and identifiers for this entity.
- CNNVD-202604-4086cnnvd
- EUVD-2026-24136enisa_euvd
- GHSA-3p9c-22jr-wq4xenisa_euvd
- BIT-libpython-2026-3298osv
- BIT-python-2026-3298osv
- BIT-python-min-2026-3298osv
- PSF-0000-CVE-2026-3298osv
- PSF-2026-20osv
sources
Which sources assert this record, and when.
references (19)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2026-3298cnnvd
- https://github.com/python/cpython/tagsPatchcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2026-3298cnnvd
- https://github.com/python/cpython/commit/1274766d3c29007ab77245a72abbf8dce2a9db4denisa_euvd
- https://github.com/python/cpython/commit/27522b7d6e6588f03e61099dd858cd5a9314e2f2enisa_euvd
- https://github.com/python/cpython/commit/6c8b85b3f1d83d5697ec19880960e1eacee56688enisa_euvd
- https://github.com/python/cpython/commit/95633d2aad4721e25e4dfd9f43dfb6e1edcbd741enisa_euvd
- https://github.com/python/cpython/commit/f5ca38739241fe7a40a4b116d5a8a1364dd6fea7enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan