CVE-2026-3446
MEDIUM
6,0
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: low
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
Description
AI Translation Available
When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use 'validate=True' to enable stricter processing of base64 data.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0005
Percentile
0,2th
Updated
EPSS Score Trend (Last 6 Days)
345
Insufficient Verification of Data Authenticity
DraftCommon Consequences
Security Scopes Affected:
Integrity
Other
Potential Impacts:
Varies By Context
Unexpected State
Applicable Platforms
Technologies:
ICS/OT
https://github.com/python/cpython/commit/1f9958f909c1b41a4ffc0b613ef8ec8fa5e7c4…
https://github.com/python/cpython/commit/4561f6418a691b3e89aef0901f53fe0dfb7f7c…
https://github.com/python/cpython/commit/e31c55121620189a0d1a07b689762d8ca9c1b7…
https://github.com/python/cpython/issues/145264
https://github.com/python/cpython/pull/145267
https://mail.python.org/archives/list/[email protected]/thread/F5ZT5…