UpHeron
All vulnerabilities

Servers and applications

CVE-2018-20406

Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of data. This issue is fixed in: v3.4.10, v3.4.10rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.7rc1, v3.5.8,…

Severity
High 7.5
Published
23 Dec 2018
Last changed
15 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.7.1
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • From 3.4.0 before 3.7.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-20406
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-20406