CVE-2026-3298
ADVISORY - nistSummary
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.
Docker
CREATED
UPDATED
ADVISORY ID
CVE-2026-3298
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| python | dhi | - | - | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.10 | apk | alpine | 3.23 | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.10 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| alpine/python-3.11 | apk | alpine | 3.23 | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.11 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| alpine/python-3.12 | apk | alpine | 3.23 | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.12 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| alpine/python-3.13 | apk | alpine | 3.23 | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.13 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| alpine/python-3.14 | apk | alpine | 3.23 | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.14 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| debian/python-3.10 | deb | debian | 13 | <3.14.5-rc1 | 3.14.5-rc1 |
| debian/python-3.10 | deb | debian | 13 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| debian/python-3.11 | deb | debian | 13 | <3.14.5-rc1 | 3.14.5-rc1 |
| debian/python-3.11 | deb | debian | 13 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| debian/python-3.12 | deb | debian | 13 | <3.14.5-rc1 | 3.14.5-rc1 |
| debian/python-3.12 | deb | debian | 13 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| debian/python-3.13 | deb | debian | 13 | <3.14.5-rc1 | 3.14.5-rc1 |
| debian/python-3.13 | deb | debian | 13 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| debian/python-3.14 | deb | debian | 13 | <3.14.5-rc1 | 3.14.5-rc1 |
| debian/python-3.14 | deb | debian | 13 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| python | dhi | - | - | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-3298
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
8.8highDebian
CREATED
UPDATED
ADVISORY IDCVE-2026-3298
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AlowUbuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-3298
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumBitnami
CREATED
UPDATED
ADVISORY ID
BIT-libpython-2026-3298
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
8.8highBitnami
CREATED
UPDATED
ADVISORY ID
BIT-python-2026-3298
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
8.8highBitnami
CREATED
UPDATED
ADVISORY ID
BIT-python-min-2026-3298
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
8.8highChainguard
CREATED
UPDATED
ADVISORY ID
CGA-252r-8vp6-7f2v
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Photon
CREATED
UPDATED
ADVISORY ID
CVE-2026-3298
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
8.6highminimos
CREATED
UPDATED
ADVISORY ID
MINI-6v47-g9m7-fc8f
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
minimos
CREATED
UPDATED
ADVISORY ID
MINI-fh4r-jmv4-58cj
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
minimos
CREATED
UPDATED
ADVISORY ID
MINI-p2h8-6qw2-33vg
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
minimos
CREATED
UPDATED
ADVISORY ID
MINI-xj58-qhf9-9m2x
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-