When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use "validate=True" to enable stricter processing of base64 data.
CVSS Details
- CVSS 4.0 Base Score: 6 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade tkinterUpgrade python-testUpgrade python-libsUpgrade python3-testUpgrade pythonUpgrade python3-tkinterUpgrade python3-debugUpgrade python-toolsUpgrade python3Upgrade python3-toolsUpgrade python-debuginfoUpgrade python3-debuginfoUpgrade python-debugUpgrade python3-libsUpgrade python-develUpgrade python3-devel | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-tkinterUpgrade python3-idleUpgrade python3-libsUpgrade python3-debugUpgrade python3.9-debuginfoUpgrade python3-develUpgrade python3Upgrade python-unversioned-commandUpgrade python3-testUpgrade python3.9-debugsource | Jul 8, 2026 | Apr 10, 2026 |
| Debian | — | Upgrade python3.13 | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 10, 2026 |
| Suse | — | Upgrade libpython3_6m1_0-32bitUpgrade python313-toolsUpgrade python311-tkUpgrade python36Upgrade python-cursesUpgrade python3-docUpgrade libpython3_9-1_0Upgrade python313-cursesUpgrade python-demoUpgrade python311-cursesUpgrade python39Upgrade python313-develUpgrade python310-toolsUpgrade python311-idleUpgrade python3-doc-devhelpUpgrade python3Upgrade libpython3_4m1_0Upgrade python313-baseUpgrade python311-develUpgrade python39-baseUpgrade python-docUpgrade python310-idleUpgrade python3-testsuiteUpgrade libpython3_10-1_0Upgrade python310-develUpgrade pythonUpgrade python310-baseUpgrade python310-cursesUpgrade python313-dbmUpgrade python-xmlUpgrade libpython2_7-1_0-32bitUpgrade python310Upgrade python-idleUpgrade python313Upgrade python36-develUpgrade python313-idleUpgrade python-32bitUpgrade libpython2_7-1_0Upgrade python36-baseUpgrade python310-tkUpgrade libpython3_11-1_0Upgrade python39-dbmUpgrade python3-develUpgrade python3-idleUpgrade python3-dbmUpgrade python-baseUpgrade python3-toolsUpgrade libpython3_4m1_0-32bitUpgrade python310-dbmUpgrade python313-tkUpgrade python311-toolsUpgrade python-doc-pdfUpgrade python-develUpgrade python3-baseUpgrade python-gdbmUpgrade python-tkUpgrade python39-cursesUpgrade python311-baseUpgrade python3-tkUpgrade python311Upgrade python-base-32bitUpgrade libpython3_13-1_0Upgrade python311-dbmUpgrade libpython3_6m1_0Upgrade python3-curses | May 7, 2026 | Apr 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub