CVE-2016-5636
Python 3.5: Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before…
CVE-2016-5636 is fixed in Python 3.5 on 1 platform by Python 3.5 3.5.2 (version 3.5.2), released June 26, 2016. It is not reported as exploited. Patch Radar priority: Urgent.
Urgent
CVSS
9.8
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.2548
97th percentile
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| Python 3.5 | 3.5.2 | Python 3.5 3.5.2 | Jun 26, 2016 |