When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use "validate=True" to enable stricter processing of base64 data.
CVSS Details
- CVSS 4.0 Base Score: 6 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-testUpgrade tkinterUpgrade python-libsUpgrade pythonUpgrade python3-testUpgrade python3Upgrade python3-develUpgrade python3-libsUpgrade python3-toolsUpgrade python3-tkinterUpgrade python3-debuginfoUpgrade python3-debugUpgrade python-develUpgrade python-toolsUpgrade python-debuginfoUpgrade python-debug | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-libsUpgrade python3.9-debuginfoUpgrade python3-develUpgrade python3-debugUpgrade python3-tkinterUpgrade python3-idleUpgrade python3.9-debugsourceUpgrade python3Upgrade python-unversioned-commandUpgrade python3-test | Jul 8, 2026 | Apr 10, 2026 |
| Debian | — | Upgrade python3.13 | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 10, 2026 |
| Suse | — | Upgrade python310-baseUpgrade libpython3_10-1_0Upgrade python-idleUpgrade python310-develUpgrade python311-tkUpgrade python313-toolsUpgrade python310Upgrade python313-baseUpgrade libpython3_4m1_0Upgrade python36Upgrade libpython3_6m1_0-32bitUpgrade pythonUpgrade python310-cursesUpgrade python3-testsuiteUpgrade python310-idleUpgrade python311-develUpgrade python-xmlUpgrade python313-dbmUpgrade python-docUpgrade python39Upgrade python311-cursesUpgrade python39-baseUpgrade python3-docUpgrade python3-doc-devhelpUpgrade libpython3_9-1_0Upgrade python313-cursesUpgrade python310-toolsUpgrade python-cursesUpgrade python313-develUpgrade python3Upgrade libpython2_7-1_0-32bitUpgrade python-demoUpgrade python311-idleUpgrade python3-toolsUpgrade python39-dbmUpgrade python36-baseUpgrade python3-baseUpgrade python36-develUpgrade libpython3_6m1_0Upgrade libpython3_4m1_0-32bitUpgrade python313-tkUpgrade python310-dbmUpgrade python-tkUpgrade python311Upgrade python-base-32bitUpgrade libpython3_13-1_0Upgrade python311-baseUpgrade python3-dbmUpgrade python3-idleUpgrade python-baseUpgrade python39-cursesUpgrade python311-dbmUpgrade python3-cursesUpgrade python3-tkUpgrade python311-toolsUpgrade python313-idleUpgrade libpython2_7-1_0Upgrade python-32bitUpgrade python-develUpgrade python313Upgrade python-gdbmUpgrade python-doc-pdfUpgrade python310-tkUpgrade python3-develUpgrade libpython3_11-1_0 | May 7, 2026 | Apr 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub