{
  "cveId": "CVE-2016-3189",
  "url": "https://patchblox.com/security/cve/CVE-2016-3189",
  "summary": "CVE-2016-3189 is fixed in 2 products on 1 platform, first by Python 3.10 3.10.3, released March 16, 2022. 2 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Python 3.8 and 4 others: Use After Free",
  "description": "Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.",
  "published": "2016-06-30T17:59:01Z",
  "severity": "",
  "cvss": 6.5,
  "cwe": "CWE-416: Use After Free",
  "epss": 0.15685,
  "epssPercentile": 0.96871,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2016-3189",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Python 3.10",
      "fixedVersion": "3.10.3",
      "fix": "Python 3.10 3.10.3",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.10-3.10.3",
      "released": "2022-03-16T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Python 3.9",
      "fixedVersion": "3.9.13",
      "fix": "Python 3.9 3.9.13",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.9-3.9.13",
      "released": "2022-05-17T00:00:00Z"
    }
  ],
  "noFixYet": [
    {
      "platform": "Windows apps",
      "product": "Python 3.7",
      "status": "no-fix",
      "affectedVersion": "3.7.9"
    },
    {
      "platform": "Windows apps",
      "product": "Python 3.8",
      "status": "no-fix",
      "affectedVersion": "3.8.10"
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}