When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use "validate=True" to enable stricter processing of base64 data.
CVSS Details
- CVSS 4.0 Base Score: 6 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-toolsUpgrade python3-libsUpgrade python3-debuginfoUpgrade python3-develUpgrade python-debugUpgrade python3-toolsUpgrade python3-tkinterUpgrade python3Upgrade python-develUpgrade python-debuginfoUpgrade python3-debugUpgrade tkinterUpgrade python-testUpgrade pythonUpgrade python3-testUpgrade python-libs | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade python3.9-debugsourceUpgrade python3Upgrade python3-testUpgrade python-unversioned-commandUpgrade python3-develUpgrade python3.9-debuginfoUpgrade python3-libsUpgrade python3-debugUpgrade python3-idleUpgrade python3-tkinter | Jul 8, 2026 | Apr 10, 2026 |
| Debian | — | Upgrade python3.13 | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 10, 2026 |
| Suse | — | Upgrade python3-tkUpgrade python-base-32bitUpgrade libpython3_13-1_0Upgrade python311-baseUpgrade python-baseUpgrade python311Upgrade python39-cursesUpgrade python36-develUpgrade libpython3_6m1_0Upgrade python-gdbmUpgrade python3-dbmUpgrade python-doc-pdfUpgrade python311-toolsUpgrade python313Upgrade python3-idleUpgrade libpython3_11-1_0Upgrade python3-develUpgrade python36-baseUpgrade python3-baseUpgrade python-develUpgrade python3-toolsUpgrade python-32bitUpgrade python313-idleUpgrade libpython2_7-1_0Upgrade python310-dbmUpgrade libpython3_4m1_0-32bitUpgrade python-tkUpgrade python39-dbmUpgrade python3-cursesUpgrade python313-tkUpgrade python311-dbmUpgrade python310-tkUpgrade libpython3_10-1_0Upgrade pythonUpgrade python3-doc-devhelpUpgrade python3-docUpgrade python-cursesUpgrade libpython3_9-1_0Upgrade python310-develUpgrade python313-baseUpgrade python310-idleUpgrade python311-develUpgrade python310-baseUpgrade python-idleUpgrade python310-cursesUpgrade python36Upgrade python313-toolsUpgrade python310Upgrade python311-tkUpgrade python313-cursesUpgrade python313-develUpgrade python311-idleUpgrade python310-toolsUpgrade python-demoUpgrade python311-cursesUpgrade python39Upgrade python313-dbmUpgrade python-docUpgrade python39-baseUpgrade libpython2_7-1_0-32bitUpgrade libpython3_6m1_0-32bitUpgrade libpython3_4m1_0Upgrade python3Upgrade python-xmlUpgrade python3-testsuite | May 7, 2026 | Apr 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub