VDB
RHSA-2026:58420
RHSA-2026:58420
PUBLISHED
CVSS 2.799999952316284 LOW
A flaw was found in the Python base64 module. When decoding base64 data using functions like base64.b64decode(), the decoding process prematurely stops upon encountering the first padding character. This can result in incomplete data being processed, where any information following the initial padding is unexpectedly ignored. Consequently, applications might interpret or handle base64-encoded data inconsistently compared to other implementations, potentially leading to data integrity issues.
Risk Scores
CVSS 3.1
2.799999952316284
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | python3-12-main@src as a component of Red Hat Hardened Images | * |
| Red Hat | python3-12-main@x86_64 as a component of Red Hat Hardened Images | * |
| Red Hat | python3-12-main@aarch64 as a component of Red Hat Hardened Images | * |
Timeline
- Aug 21, 2026 CVE Published
- Sep 6, 2026 CVE Updated
- Sep 6, 2026 Distribution Patch
- Sep 6, 2026 Distribution Patch
- Sep 6, 2026 Security Advisory
- Sep 6, 2026 Security Advisory
- Sep 6, 2026 Security Advisory
- Sep 6, 2026 Security Advisory
- Sep 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:58420 advisory
- https://access.redhat.com/security/cve/CVE-2026-3446 advisory
- https://access.redhat.com/security/cve/CVE-2026-3479 advisory
- https://access.redhat.com/security/cve/CVE-2026-6019 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://images.redhat.com/ advisory
- https://access.redhat.com/security/cve/CVE-2026-18503 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58420.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2457410 issue
- https://www.cve.org/CVERecord?id=CVE-2026-3446 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-3446 advisory
- https://github.com/python/cpython/commit/1f9958f909c1b41a4ffc0b613ef8ec8fa5e7c474 advisory
- https://github.com/python/cpython/commit/4561f6418a691b3e89aef0901f53fe0dfb7f7c0e advisory
- https://github.com/python/cpython/commit/e31c55121620189a0d1a07b689762d8ca9c1b7fa advisory
- https://github.com/python/cpython/issues/145264 advisory
- https://github.com/python/cpython/pull/145267 advisory
- https://mail.python.org/archives/list/security-announce@python.org/thread/F5ZT5ICGJ6CKXVUJ34YBVY7WOZ5SHG53/ advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2448746 issue
- https://www.cve.org/CVERecord?id=CVE-2026-3479 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-3479 advisory
…and 16 more