Servers and applications
CVE-2020-10735
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.
- Severity
- High 7.5
- Published
- 9 Sept 2022
- Last changed
- 14 Oct 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 3.7.14, 3.8.14, 3.9.14, 3.10.7
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
PythonServers and applications · cpe:a:python:python |
All 17 release lines
|