CVE-2022-48564 — Vulnerability intelligence

python — python

Published: 2023-08-22T00:00:00.000Z

CVSS

6.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.

Sources

• CVE-2022-48564
• Exploit, Issue Tracking, Patch, Vendor Advisory
• Mailing List, Third Party Advisory, VDB Entry
• Third Party Advisory
• CVE-2022-48564