{
  "cveId": "CVE-2024-3220",
  "url": "https://patchblox.com/security/cve/CVE-2024-3220",
  "summary": "CVE-2024-3220 is fixed in Python 3.14 on 2 platforms by Python 3.14 3.14.9 (version 3.14.9), released October 21, 2026. 11 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Default mimetype known files writeable on Windows",
  "description": "There is a defect in the CPython standard library module \u201Cmimetypes\u201D where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the incorrect file type.\n\nThis defect is caused by the default locations of Linux and macOS platforms (such as \u201C/etc/mime.types\u201D) also being used on Windows, where they are user-writable locations (\u201CC:\\etc\\mime.types\u201D).\n\nTo work-around this issue a user can call mimetypes.init() with an empty list (\u201C[]\u201D) on Windows platforms to avoid using the default list of known file locations.",
  "published": "2025-02-14T17:15:15Z",
  "severity": "",
  "cvss": 2.3,
  "cwe": "CWE-426: Untrusted Search Path",
  "epss": 0.00715,
  "epssPercentile": 0.5399,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2024-3220",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Python 3.14",
      "fixedVersion": "3.14.9",
      "fix": "Python 3.14 3.14.9",
      "url": "https://patchblox.com/security/fix/windows-app/python.python.3.14-3.14.9",
      "released": "2026-10-21T00:00:00Z"
    }
  ],
  "noFixYet": [
    {
      "platform": "Windows apps",
      "product": "Python 2",
      "status": "no-fix",
      "affectedVersion": "2.7.18150"
    },
    {
      "platform": "Windows apps",
      "product": "Python 3.10",
      "status": "no-fix",
      "affectedVersion": "3.10.11"
    },
    {
      "platform": "Windows apps",
      "product": "Python 3.11",
      "status": "no-fix",
      "affectedVersion": "3.11.9"
    },
    {
      "platform": "Windows apps",
      "product": "Python 3.12",
      "status": "no-fix",
      "affectedVersion": "3.12.10"
    },
    {
      "platform": "Windows apps",
      "product": "Python 3.13",
      "status": "no-fix",
      "affectedVersion": "3.13.17"
    },
    {
      "platform": "Windows apps",
      "product": "Python 3.5",
      "status": "no-fix",
      "affectedVersion": "3.5.4"
    },
    {
      "platform": "Windows apps",
      "product": "Python 3.6",
      "status": "no-fix",
      "affectedVersion": "3.6.8"
    },
    {
      "platform": "Windows apps",
      "product": "Python 3.7",
      "status": "no-fix",
      "affectedVersion": "3.7.9"
    },
    {
      "platform": "Windows apps",
      "product": "Python 3.8",
      "status": "no-fix",
      "affectedVersion": "3.8.10"
    },
    {
      "platform": "Windows apps",
      "product": "Python 3.9",
      "status": "no-fix",
      "affectedVersion": "3.9.13"
    },
    {
      "platform": "macOS",
      "product": "Python3",
      "status": "no-fix",
      "affectedVersion": "3.13.13"
    }
  ],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}