# CVE-2022-48564: Python 3.7 and 4 others: read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and…

CVE-2022-48564 is fixed in 44 products on 2 platforms, first by Python 3.8 3.8.7, released December 21, 2020. 4 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2022-48564
- Priority: Routine
- CVSS: 6.5 (Moderate)
- EPSS: 0.0165
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Aug 22, 2023
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2022-48564

## Description

read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Python 3.8 | 3.8.7 | [Python 3.8 3.8.7](https://patchblox.com/security/data/fix/windows-app/python.python.3.8-3.8.7.md) | Dec 21, 2020 |
| Linux | idle-python2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.17-1~18.04ubuntu1.13+esm4 | [idle-python2.7 2.7.17-1~18.04ubuntu1.13+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python2.7-2.7.17-1-18.04ubuntu1.13-esm4.md) | Aug 24, 2023 |
| Linux | idle-python3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.9-1~18.04ubuntu1.13+esm1 | [idle-python3.6 3.6.9-1~18.04ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python3.6-3.6.9-1-18.04ubuntu1.13-esm1.md) | Aug 24, 2023 |
| Linux | idle-python3.7 Ubuntu 18.04.6 LTS (bionic) | 3.7.5-2ubuntu1~18.04.2+esm3 | [idle-python3.7 3.7.5-2ubuntu1~18.04.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python3.7-3.7.5-2ubuntu1-18.04.2-esm3.md) | Mar 19, 2024 |
| Linux | idle-python3.8 Ubuntu 18.04.6 LTS (bionic) | 3.8.0-3ubuntu1~18.04.2+esm2 | [idle-python3.8 3.8.0-3ubuntu1~18.04.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-idle-python3.8-3.8.0-3ubuntu1-18.04.2-esm2.md) | Mar 19, 2024 |
| Linux | libpython2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.17-1~18.04ubuntu1.13+esm4 | [libpython2.7 2.7.17-1~18.04ubuntu1.13+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-2.7.17-1-18.04ubuntu1.13-esm4.md) | Aug 24, 2023 |
| Linux | libpython2.7-minimal Ubuntu 18.04.6 LTS (bionic) | 2.7.17-1~18.04ubuntu1.13+esm4 | [libpython2.7-minimal 2.7.17-1~18.04ubuntu1.13+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-minimal-2.7.17-1-18.04ubuntu1.13-esm4.md) | Aug 24, 2023 |
| Linux | libpython2.7-stdlib Ubuntu 18.04.6 LTS (bionic) | 2.7.17-1~18.04ubuntu1.13+esm4 | [libpython2.7-stdlib 2.7.17-1~18.04ubuntu1.13+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-stdlib-2.7.17-1-18.04ubuntu1.13-esm4.md) | Aug 24, 2023 |
| Linux | libpython2.7-testsuite Ubuntu 18.04.6 LTS (bionic) | 2.7.17-1~18.04ubuntu1.13+esm4 | [libpython2.7-testsuite 2.7.17-1~18.04ubuntu1.13+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython2.7-testsuite-2.7.17-1-18.04ubuntu1.13-esm4.md) | Aug 24, 2023 |
| Linux | libpython3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.9-1~18.04ubuntu1.13+esm1 | [libpython3.6 3.6.9-1~18.04ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-3.6.9-1-18.04ubuntu1.13-esm1.md) | Aug 24, 2023 |
| Linux | libpython3.6-minimal Ubuntu 18.04.6 LTS (bionic) | 3.6.9-1~18.04ubuntu1.13+esm1 | [libpython3.6-minimal 3.6.9-1~18.04ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-minimal-3.6.9-1-18.04ubuntu1.13-esm1.md) | Aug 24, 2023 |
| Linux | libpython3.6-stdlib Ubuntu 18.04.6 LTS (bionic) | 3.6.9-1~18.04ubuntu1.13+esm1 | [libpython3.6-stdlib 3.6.9-1~18.04ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-stdlib-3.6.9-1-18.04ubuntu1.13-esm1.md) | Aug 24, 2023 |
| Linux | libpython3.6-testsuite Ubuntu 18.04.6 LTS (bionic) | 3.6.9-1~18.04ubuntu1.13+esm1 | [libpython3.6-testsuite 3.6.9-1~18.04ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.6-testsuite-3.6.9-1-18.04ubuntu1.13-esm1.md) | Aug 24, 2023 |
| Linux | libpython3.7 Ubuntu 18.04.6 LTS (bionic) | 3.7.5-2ubuntu1~18.04.2+esm3 | [libpython3.7 3.7.5-2ubuntu1~18.04.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.7-3.7.5-2ubuntu1-18.04.2-esm3.md) | Mar 19, 2024 |
| Linux | libpython3.7-minimal Ubuntu 18.04.6 LTS (bionic) | 3.7.5-2ubuntu1~18.04.2+esm3 | [libpython3.7-minimal 3.7.5-2ubuntu1~18.04.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.7-minimal-3.7.5-2ubuntu1-18.04.2-esm3.md) | Mar 19, 2024 |
| Linux | libpython3.7-stdlib Ubuntu 18.04.6 LTS (bionic) | 3.7.5-2ubuntu1~18.04.2+esm3 | [libpython3.7-stdlib 3.7.5-2ubuntu1~18.04.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.7-stdlib-3.7.5-2ubuntu1-18.04.2-esm3.md) | Mar 19, 2024 |
| Linux | libpython3.7-testsuite Ubuntu 18.04.6 LTS (bionic) | 3.7.5-2ubuntu1~18.04.2+esm3 | [libpython3.7-testsuite 3.7.5-2ubuntu1~18.04.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.7-testsuite-3.7.5-2ubuntu1-18.04.2-esm3.md) | Mar 19, 2024 |
| Linux | libpython3.8 Ubuntu 18.04.6 LTS (bionic) | 3.8.0-3ubuntu1~18.04.2+esm2 | [libpython3.8 3.8.0-3ubuntu1~18.04.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.8-3.8.0-3ubuntu1-18.04.2-esm2.md) | Mar 19, 2024 |
| Linux | libpython3.8-minimal Ubuntu 18.04.6 LTS (bionic) | 3.8.0-3ubuntu1~18.04.2+esm2 | [libpython3.8-minimal 3.8.0-3ubuntu1~18.04.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.8-minimal-3.8.0-3ubuntu1-18.04.2-esm2.md) | Mar 19, 2024 |
| Linux | libpython3.8-stdlib Ubuntu 18.04.6 LTS (bionic) | 3.8.0-3ubuntu1~18.04.2+esm2 | [libpython3.8-stdlib 3.8.0-3ubuntu1~18.04.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.8-stdlib-3.8.0-3ubuntu1-18.04.2-esm2.md) | Mar 19, 2024 |
| Linux | libpython3.8-testsuite Ubuntu 18.04.6 LTS (bionic) | 3.8.0-3ubuntu1~18.04.2+esm2 | [libpython3.8-testsuite 3.8.0-3ubuntu1~18.04.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpython3.8-testsuite-3.8.0-3ubuntu1-18.04.2-esm2.md) | Mar 19, 2024 |
| Linux | platform-python RHEL 8 | 0:3.6.8-56.el8_9.2 | [RHSA-2024:0114](https://patchblox.com/security/data/fix/linux/rhsa-2024-0114.md) | Jan 10, 2024 |
| Linux | platform-python almalinux 8 | 3.6.8-56.el8_9.2.alma.1 | [ALSA-2024:0114](https://patchblox.com/security/data/fix/linux/alsa-2024-0114.md) | Jan 10, 2024 |
| Linux | platform-python ol 8 | 0:3.6.8-56.0.1.el8_9.2 | [ELSA-2024-0114](https://patchblox.com/security/data/fix/linux/elsa-2024-0114.md) | Jan 10, 2024 |
| Linux | platform-python-debug RHEL 8 | 0:3.6.8-56.el8_9.2 | [RHSA-2024:0114](https://patchblox.com/security/data/fix/linux/rhsa-2024-0114.md) | Jan 10, 2024 |
| Linux | platform-python-debug almalinux 8 | 3.6.8-56.el8_9.2.alma.1 | [ALSA-2024:0114](https://patchblox.com/security/data/fix/linux/alsa-2024-0114.md) | Jan 10, 2024 |
| Linux | platform-python-debug ol 8 | 0:3.6.8-56.0.1.el8_9.2 | [ELSA-2024-0114](https://patchblox.com/security/data/fix/linux/elsa-2024-0114.md) | Jan 10, 2024 |
| Linux | platform-python-devel RHEL 8 | 0:3.6.8-56.el8_9.2 | [RHSA-2024:0114](https://patchblox.com/security/data/fix/linux/rhsa-2024-0114.md) | Jan 10, 2024 |
| Linux | platform-python-devel almalinux 8 | 3.6.8-56.el8_9.2.alma.1 | [ALSA-2024:0114](https://patchblox.com/security/data/fix/linux/alsa-2024-0114.md) | Jan 10, 2024 |
| Linux | platform-python-devel ol 8 | 0:3.6.8-56.0.1.el8_9.2 | [ELSA-2024-0114](https://patchblox.com/security/data/fix/linux/elsa-2024-0114.md) | Jan 10, 2024 |
| Linux | pypy3 Debian 12.15 (bookworm) | 7.3.5+dfsg-2 | [DEBIAN-CVE-2022-48564](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48564.md) | Aug 22, 2023 |
| Linux | pypy3 Debian 13.5 (trixie) | 7.3.5+dfsg-2 | [DEBIAN-CVE-2022-48564](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48564.md) | Aug 22, 2023 |
| Linux | pypy3 Debian 14 | 7.3.5+dfsg-2 | [DEBIAN-CVE-2022-48564](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48564.md) | Aug 22, 2023 |
| Linux | python2.7 Ubuntu 18.04.6 LTS (bionic) | 2.7.17-1~18.04ubuntu1.13+esm4 | [python2.7 2.7.17-1~18.04ubuntu1.13+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-2.7.17-1-18.04ubuntu1.13-esm4.md) | Aug 24, 2023 |
| Linux | python2.7-examples Ubuntu 18.04.6 LTS (bionic) | 2.7.17-1~18.04ubuntu1.13+esm4 | [python2.7-examples 2.7.17-1~18.04ubuntu1.13+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-examples-2.7.17-1-18.04ubuntu1.13-esm4.md) | Aug 24, 2023 |
| Linux | python2.7-minimal Ubuntu 18.04.6 LTS (bionic) | 2.7.17-1~18.04ubuntu1.13+esm4 | [python2.7-minimal 2.7.17-1~18.04ubuntu1.13+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python2.7-minimal-2.7.17-1-18.04ubuntu1.13-esm4.md) | Aug 24, 2023 |
| Linux | python3-idle RHEL 8 | 0:3.6.8-56.el8_9.2 | [RHSA-2024:0114](https://patchblox.com/security/data/fix/linux/rhsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3-idle almalinux 8 | 3.6.8-56.el8_9.2.alma.1 | [ALSA-2024:0114](https://patchblox.com/security/data/fix/linux/alsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3-idle ol 8 | 0:3.6.8-56.0.1.el8_9.2 | [ELSA-2024-0114](https://patchblox.com/security/data/fix/linux/elsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3-libs RHEL 8 | 0:3.6.8-56.el8_9.2 | [RHSA-2024:0114](https://patchblox.com/security/data/fix/linux/rhsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3-libs almalinux 8 | 3.6.8-56.el8_9.2.alma.1 | [ALSA-2024:0114](https://patchblox.com/security/data/fix/linux/alsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3-libs ol 8 | 0:3.6.8-56.0.1.el8_9.2 | [ELSA-2024-0114](https://patchblox.com/security/data/fix/linux/elsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3-test RHEL 8 | 0:3.6.8-56.el8_9.2 | [RHSA-2024:0114](https://patchblox.com/security/data/fix/linux/rhsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3-test almalinux 8 | 3.6.8-56.el8_9.2.alma.1 | [ALSA-2024:0114](https://patchblox.com/security/data/fix/linux/alsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3-test ol 8 | 0:3.6.8-56.0.1.el8_9.2 | [ELSA-2024-0114](https://patchblox.com/security/data/fix/linux/elsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3-tkinter RHEL 8 | 0:3.6.8-56.el8_9.2 | [RHSA-2024:0114](https://patchblox.com/security/data/fix/linux/rhsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3-tkinter almalinux 8 | 3.6.8-56.el8_9.2.alma.1 | [ALSA-2024:0114](https://patchblox.com/security/data/fix/linux/alsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3-tkinter ol 8 | 0:3.6.8-56.0.1.el8_9.2 | [ELSA-2024-0114](https://patchblox.com/security/data/fix/linux/elsa-2024-0114.md) | Jan 10, 2024 |
| Linux | python3.6 Ubuntu 18.04.6 LTS (bionic) | 3.6.9-1~18.04ubuntu1.13+esm1 | [python3.6 3.6.9-1~18.04ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-3.6.9-1-18.04ubuntu1.13-esm1.md) | Aug 24, 2023 |
| Linux | python3.6-examples Ubuntu 18.04.6 LTS (bionic) | 3.6.9-1~18.04ubuntu1.13+esm1 | [python3.6-examples 3.6.9-1~18.04ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-examples-3.6.9-1-18.04ubuntu1.13-esm1.md) | Aug 24, 2023 |
| Linux | python3.6-minimal Ubuntu 18.04.6 LTS (bionic) | 3.6.9-1~18.04ubuntu1.13+esm1 | [python3.6-minimal 3.6.9-1~18.04ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-minimal-3.6.9-1-18.04ubuntu1.13-esm1.md) | Aug 24, 2023 |
| Linux | python3.6-venv Ubuntu 18.04.6 LTS (bionic) | 3.6.9-1~18.04ubuntu1.13+esm1 | [python3.6-venv 3.6.9-1~18.04ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.6-venv-3.6.9-1-18.04ubuntu1.13-esm1.md) | Aug 24, 2023 |
| Linux | python3.7 Ubuntu 18.04.6 LTS (bionic) | 3.7.5-2ubuntu1~18.04.2+esm3 | [python3.7 3.7.5-2ubuntu1~18.04.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.7-3.7.5-2ubuntu1-18.04.2-esm3.md) | Mar 19, 2024 |
| Linux | python3.7-examples Ubuntu 18.04.6 LTS (bionic) | 3.7.5-2ubuntu1~18.04.2+esm3 | [python3.7-examples 3.7.5-2ubuntu1~18.04.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.7-examples-3.7.5-2ubuntu1-18.04.2-esm3.md) | Mar 19, 2024 |
| Linux | python3.7-minimal Ubuntu 18.04.6 LTS (bionic) | 3.7.5-2ubuntu1~18.04.2+esm3 | [python3.7-minimal 3.7.5-2ubuntu1~18.04.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.7-minimal-3.7.5-2ubuntu1-18.04.2-esm3.md) | Mar 19, 2024 |
| Linux | python3.7-venv Ubuntu 18.04.6 LTS (bionic) | 3.7.5-2ubuntu1~18.04.2+esm3 | [python3.7-venv 3.7.5-2ubuntu1~18.04.2+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.7-venv-3.7.5-2ubuntu1-18.04.2-esm3.md) | Mar 19, 2024 |
| Linux | python3.8 Ubuntu 18.04.6 LTS (bionic) | 3.8.0-3ubuntu1~18.04.2+esm2 | [python3.8 3.8.0-3ubuntu1~18.04.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.8-3.8.0-3ubuntu1-18.04.2-esm2.md) | Mar 19, 2024 |
| Linux | python3.8-examples Ubuntu 18.04.6 LTS (bionic) | 3.8.0-3ubuntu1~18.04.2+esm2 | [python3.8-examples 3.8.0-3ubuntu1~18.04.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.8-examples-3.8.0-3ubuntu1-18.04.2-esm2.md) | Mar 19, 2024 |
| Linux | python3.8-minimal Ubuntu 18.04.6 LTS (bionic) | 3.8.0-3ubuntu1~18.04.2+esm2 | [python3.8-minimal 3.8.0-3ubuntu1~18.04.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.8-minimal-3.8.0-3ubuntu1-18.04.2-esm2.md) | Mar 19, 2024 |
| Linux | python3.8-venv Ubuntu 18.04.6 LTS (bionic) | 3.8.0-3ubuntu1~18.04.2+esm2 | [python3.8-venv 3.8.0-3ubuntu1~18.04.2+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3.8-venv-3.8.0-3ubuntu1-18.04.2-esm2.md) | Mar 19, 2024 |

## No fix yet

| Platform | Product | Status |
|---|---|---|
| Windows apps | Python 2 | no-fix |
| Windows apps | Python 3.5 | no-fix |
| Windows apps | Python 3.6 | no-fix |
| Windows apps | Python 3.7 | no-fix |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.