VDB
GCVE-110-MAGEIA-2014-286
GCVE-110-MAGEIA-2014-286
Advisory Published
Python 2 and 3 are susceptible to arbitrary process memory reading by a user
or adversary due to a bug in the _json module caused by insufficient bounds
checking. The bug is caused by allowing the user to supply a negative value
that is used an an array index, causing the scanstring function to access
process memory outside of the string it is intended to access
(CVE-2014-4616).
This issue also affected the python-simplejson package, which has been
patched to fix the bug.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | python-simplejson | 2.6.0-2.1.mga3 (unaffected), 0 (affected) | — |
| Mageia | python-simplejson | 0 (affected), 3.3.0-3.1.mga4 (unaffected) | — |
References
Browse GCVE Records
72,337 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.