地图 / Two out-of-bounds array reads in Python AST builder (Re-opening 520612 with CVEs)

Two out-of-bounds array reads in Python AST builder (Re-opening 520612 with CVEs)

内存破坏 / 缓冲区越界读 / #746766

厂商: Internet Bug Bounty
严重程度: 低危 · CVSS 4.4
赏金: $2,000
弱点: 缓冲区越界读
研究员: @blarsen
披露日期: 2021-08-25
资产: Python (Legacy)
CVE: CVE-2019-19274 CVE-2019-19275

该报告还没有中文解读。

原文摘录

摘自原文（686 字符中的一小部分）

I'm re-submitting #520612 after getting CVEs issued, as instructed in an automated email from November 17th.

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Internet Bug Bounty 所有。

时间线

2019-11-26报告提交
2021-08-25公开披露

阅读 HackerOne 原文 ↗作者 @blarsen · 版权归作者与 Internet Bug Bounty 所有

同类报告

Heap Buffer Overflow (READ: 4) in phar_parse_pharfileInternet Bug Bounty · 2020-10-10 Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflowInternet Bug Bounty · 2020-10-12 · $1,500 CVE-2024-7264: ASN.1 date parser overreadcurl · 2024-08-01 CVE-2024-7347: Buffer overread in the ngx_http_mp4_moduleInternet Bug Bounty · 2024-08-27 · $2,142 apache access.log leakage via long request on https://rapida.ru/QIWI · —CVE-2025-9086: Out of bounds read for cookie pathcurl · 2025-09-10