Safety vulnerability ID: 78771
The information on this page was manually curated by our Cybersecurity Intelligence Team.
Affected versions of the MicroPython package are vulnerable to Use After Free due to improper handling of resized bytes objects that copy into themselves in the `py/objarray.c` module. The vulnerability arises when a bytes object is resized and self-copied without adequate memory management, causing the code to reference memory that has already been freed. An attacker can exploit this remotely by triggering the flawed resizing operation—though the complexity of such an attack is rather high and exploitation appears difficult—which may lead to memory corruption, instability or potential code execution.
Latest version: 3.3.3.post3
CPython copy module ported to MicroPython
This vulnerability has no description
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application