Heap Overflow in PyMiniRacer · CVE-2020-25489 · GitHub Advisory Database · GitHub

Heap Overflow in PyMiniRacer

Moderate severity GitHub Reviewed Published Sep 18, 2020 in sqreen/PyMiniRacer • Updated Jan 9, 2023

Package

py-mini-racer (pip)

Affected versions

< 0.3.0

Patched versions

0.3.0

Description

A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption.

More details on https://blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it/.

References

nizox published to sqreen/PyMiniRacer

Sep 18, 2020

Reviewed Sep 18, 2020

Published to the GitHub Advisory Database Sep 18, 2020

Last updated Jan 9, 2023