UpHeron
All vulnerabilities

Servers and applications

CVE-2019-12900

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Severity
Critical 9.8
Published
19 Jun 2019
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.7.13, 3.8.13, 3.9.11, 3.10.3
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • From 3.7.0 before 3.7.13
  • From 3.8.0 before 3.8.13
  • From 3.9.0 before 3.9.11
  • From 3.10.0 before 3.10.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-12900
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-12900