Safety vulnerability ID: 78774
The information on this page was manually curated by our Cybersecurity Intelligence Team.
Affected versions of the MicroPython package are vulnerable to Heap-Based Buffer Overflow due to improper handling of integer-to-bytes conversion when the integer zero is passed to the `mpz_as_bytes` function in `py/objint.c`. The `mpz_as_bytes` function in the `py/objint.c` module fails to correctly manage buffer boundaries during conversion of zero from an integer to a bytes object, resulting in a heap-buffer-overflow write. An attacker can exploit this vulnerability remotely by supplying a crafted conversion input that triggers the flawed code path in `mpz_as_bytes`, potentially causing memory corruption, application instability or denial of service of the MicroPython runtime.
Latest version: 3.3.3.post3
CPython copy module ported to MicroPython
This vulnerability has no description
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application