Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.
The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.
CVSS Details
- CVSS 4.0 Base Score: 9.1 (CRITICAL)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3.14-freethreading-testUpgrade python3.14-testUpgrade python3.11-tkinterUpgrade python3.12-develUpgrade platform-pythonUpgrade python3.14Upgrade python3.11-rpm-macrosUpgrade python3.12-rpm-macrosUpgrade python3.14-develUpgrade python3.14-freethreading-libsUpgrade python3-testUpgrade python3.12-tkinterUpgrade python3.11Upgrade python3.11-testUpgrade python3-libsUpgrade python-unversioned-commandUpgrade python3.11-debugUpgrade python3.14-freethreading-develUpgrade python3.11-develUpgrade platform-python-debugUpgrade python3.12Upgrade python3-idleUpgrade python3-debugUpgrade python3.12-libsUpgrade python3.14-debugUpgrade python3-tkinterUpgrade python3.12-idleUpgrade python3Upgrade python3.12-debugUpgrade python3.14-tkinterUpgrade python3.12-testUpgrade python3.11-idleUpgrade platform-python-develUpgrade python3.14-idleUpgrade python3.14-freethreadingUpgrade python3.11-libsUpgrade python3.14-freethreading-tkinterUpgrade python3.14-libsUpgrade python3.14-freethreading-idleUpgrade python3.14-freethreading-debugUpgrade python3-devel | Apr 29, 2026 | Apr 27, 2026 |
| Alpine Linux | — | Upgrade python3 | Aug 17, 2026 | Apr 13, 2026 |
| Amazon Linux Ami 2 | — | Upgrade python-develUpgrade python3-debugUpgrade python3-develUpgrade python3-debuginfoUpgrade python3-libsUpgrade python-libsUpgrade python-debuginfoUpgrade python3-tkinterUpgrade python-debugUpgrade python3-toolsUpgrade python-toolsUpgrade python3-testUpgrade pythonUpgrade python-testUpgrade python3Upgrade tkinter | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3.13-idleUpgrade python3.13-libsUpgrade python3.13-tkinterUpgrade python3.11Upgrade python3.12-develUpgrade python3.9-debuginfoUpgrade python3.13-debugUpgrade python3.11-libsUpgrade python-unversioned-commandUpgrade python3.11-debugUpgrade python3.11-debuginfoUpgrade python3.13Upgrade python3.14Upgrade python3.12-testUpgrade python3.14-freethreading-testUpgrade python3.14-freethreading-idleUpgrade python3-tkinterUpgrade python3.14-freethreading-tkinterUpgrade python3.14-debugUpgrade python3.9-debugsourceUpgrade python3.13-debugsourceUpgrade python3-libsUpgrade python3.11-testUpgrade python3.11-develUpgrade python3.13-develUpgrade python3-develUpgrade python3.11-tkinterUpgrade python3.12-debugsourceUpgrade python3-idleUpgrade python3.13-freethreading-debugUpgrade python3.13-freethreadingUpgrade python3.13-testUpgrade python3.12-libsUpgrade python3.12Upgrade python3.12-idleUpgrade python3.14-develUpgrade python3.11-debugsourceUpgrade python3.11-idleUpgrade python3.14-freethreading-debugUpgrade python3.12-debuginfoUpgrade python3.12-debugUpgrade python3Upgrade python3.14-testUpgrade python3.14-libsUpgrade python3.12-tkinterUpgrade python3.13-debuginfoUpgrade python3-testUpgrade python3-debugUpgrade python3.14-debugsourceUpgrade python3.14-freethreading-develUpgrade python3.14-debuginfoUpgrade python3.14-freethreading-libsUpgrade python3.14-tkinterUpgrade python3.14-freethreadingUpgrade python3.14-idle | May 4, 2026 | Apr 13, 2026 |
| Debian | — | Upgrade python3.11Upgrade python3.13Upgrade python3.9 | Apr 16, 2026 | Apr 16, 2026 |
| Freebsd | — | Upgrade python313tUpgrade python310Upgrade python314Upgrade python311Upgrade python312Upgrade python313 | Apr 17, 2026 | Apr 13, 2026 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory20 | Jul 15, 2026 | Jul 14, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jul 2, 2026 | Jul 1, 2026 |
| Oracle_linux | — | Upgrade python3-tkinterUpgrade python3-libsUpgrade python3-idleUpgrade python3.11-develUpgrade platform-python-develUpgrade python3.11-libsUpgrade python3-develUpgrade platform-python-debugUpgrade python3.11-debugUpgrade python3Upgrade python3.11-idleUpgrade python3.12-libsUpgrade python3.12-debugUpgrade python3-debugUpgrade python3.12-tkinterUpgrade python3.12Upgrade python3.12-rpm-macrosUpgrade python3.11-tkinterUpgrade python3-testUpgrade python3.11-testUpgrade python3.12-develUpgrade python3.11-rpm-macrosUpgrade python3.12-idleUpgrade python3.12-testUpgrade platform-pythonUpgrade python3.11Upgrade python-unversioned-command | Apr 29, 2026 | Apr 13, 2026 |
| Redhat_linux | — | Upgrade platform-python-debugUpgrade platform-pythonUpgrade python3.14-develUpgrade python3.14-freethreading-debugUpgrade python3.9-debugsourceUpgrade python3.12-develUpgrade python3.12-libsUpgrade python3.12-testUpgrade python3.14-freethreading-libsUpgrade python3.14-freethreading-testUpgrade python3.14-idleUpgrade python3.14-freethreadingUpgrade python3.14-testUpgrade python3.11-testUpgrade python3.11-libsUpgrade python3.12-rpm-macrosUpgrade python3-testUpgrade python3.14-libsUpgrade python3.11-tkinterUpgrade python-unversioned-commandUpgrade python3.11Upgrade python3.14Upgrade python3.11-debuginfoUpgrade python3.14-freethreading-develUpgrade python3.12-debugsourceUpgrade python3Upgrade python3.12-debugUpgrade python3.14-debugUpgrade python3.11-debugsourceUpgrade python3.12-idleUpgrade python3.9-debuginfoUpgrade python3.14-debugsourceUpgrade python3.12-debuginfoUpgrade python3-libsUpgrade python3.14-tkinterUpgrade python3.12-tkinterUpgrade python3-debugsourceUpgrade python3-idleUpgrade python3.14-freethreading-tkinterUpgrade python3.11-rpm-macrosUpgrade platform-python-develUpgrade python3-develNo solution existsUpgrade python3-tkinterUpgrade python3-debuginfoUpgrade python3.14-debuginfoUpgrade python3.11-develUpgrade python3.12Upgrade python3.11-debugUpgrade python3.14-freethreading-idleUpgrade python3.11-idleUpgrade python3-debug | Apr 28, 2026 | Apr 13, 2026 |
| Rocky_linux | — | Upgrade python3.12-testUpgrade python3.11-idleUpgrade platform-python-debugUpgrade python3.14-debugUpgrade python3-develUpgrade python3.14-freethreading-debugUpgrade python3.14-freethreadingUpgrade python3.11-libsUpgrade python3.14-freethreading-develUpgrade python3.11-debuginfoUpgrade python3.14-tkinterUpgrade python3-debugUpgrade python3.12-idleUpgrade python3.12-libsUpgrade python3.12-debugUpgrade python3-debuginfoUpgrade platform-python-develUpgrade python3.12-develUpgrade python3-debugsourceUpgrade python3.9-debuginfoUpgrade python3.14-freethreading-tkinterUpgrade python3-idleUpgrade python3-libsUpgrade python3.9-debugsourceUpgrade python3.14-libsUpgrade python3Upgrade platform-pythonUpgrade python3.12-tkinterUpgrade python3.14-idleUpgrade python3.11-tkinterUpgrade python3-testUpgrade python3.14-testUpgrade python3.14-freethreading-testUpgrade python3.14-freethreading-idleUpgrade python3.11-develUpgrade python3.11Upgrade python3.14Upgrade python3.11-testUpgrade python3-tkinterUpgrade python3.14-freethreading-libsUpgrade python3.12Upgrade python3.11-debugUpgrade python3.11-debugsourceUpgrade python3.14-debugsourceUpgrade python3.12-debuginfoUpgrade python3.14-develUpgrade python3.14-debuginfoUpgrade python3.12-debugsource | Apr 29, 2026 | Apr 28, 2026 |
| Ubuntu | — | Upgrade python3.14Upgrade libpython3.10Upgrade python3.12Upgrade libpython3.14Upgrade python3.10Upgrade libpython3.12t64 | Jul 6, 2026 | Apr 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 17, 2026 | Apr 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub