CVE-2026-3298

{
  "id": "CVE-2026-3298",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-21T15:16:37.047",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The method \"sock_recvfrom_into()\" of \"asyncio.ProacterEventLoop\" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected."
    },
    {
      "lang": "es",
      "value": "El método ’sock_recvfrom_into()’ de ’asyncio.ProacterEventLoop’ (solo Windows) carecía de una comprobación de límites para el búfer de datos al usar el parámetro nbytes. Esto permitía una escritura de búfer fuera de límites si los datos eran mayores que el tamaño del búfer. Las plataformas que no son Windows no se ven afectadas."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Python Software Foundation",
          "product": "CPython",
          "defaultStatus": "unaffected",
          "repo": "https://github.com/python/cpython",
          "versions": [
            {
              "version": "0",
              "lessThan": "3.11.16",
              "versionType": "python",
              "status": "affected"
            },
            {
              "version": "3.12.0",
              "lessThan": "3.12.14",
              "versionType": "python",
              "status": "affected"
            },
            {
              "version": "3.13.0",
              "lessThan": "3.13.14",
              "versionType": "python",
              "status": "affected"
            },
            {
              "version": "3.14.0a1",
              "lessThan": "3.14.5rc1",
              "versionType": "python",
              "status": "affected"
            },
            {
              "version": "3.15.0a1",
              "lessThan": "3.15.0b1",
              "versionType": "python",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "LOW",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-21T19:15:36.206348Z",
          "id": "CVE-2026-3298",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/python/cpython/commit/1274766d3c29007ab77245a72abbf8dce2a9db4d",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/python/cpython/commit/27522b7d6e6588f03e61099dd858cd5a9314e2f2",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/python/cpython/commit/6c8b85b3f1d83d5697ec19880960e1eacee56688",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/python/cpython/commit/95633d2aad4721e25e4dfd9f43dfb6e1edcbd741",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/python/cpython/commit/f5ca38739241fe7a40a4b116d5a8a1364dd6fea7",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/python/cpython/issues/148808",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/python/cpython/pull/148809",
      "source": "[email protected]"
    },
    {
      "url": "https://mail.python.org/archives/list/[email protected]/thread/KWTPIQBOOOUNQP7UFSLBI437NJDFLA3F/",
      "source": "[email protected]"
    }
  ]
}