VDB
RHSA-2026:60511
RHSA-2026:60511
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the Python base64 module. When decoding base64 data using functions like base64.b64decode(), the decoding process prematurely stops upon encountering the first padding character. This can result in incomplete data being processed, where any information following the initial padding is unexpectedly ignored. Consequently, applications might interpret or handle base64-encoded data inconsistently compared to other implementations, potentially leading to data integrity issues.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | python3-11-main@x86_64 as a component of Red Hat Hardened Images | * |
| Red Hat | python3-11-main@aarch64 as a component of Red Hat Hardened Images | * |
| Red Hat | python3-11-main@src as a component of Red Hat Hardened Images | * |
Timeline
- Aug 27, 2026 CVE Published
- Sep 6, 2026 CVE Updated
- Sep 6, 2026 Distribution Patch
- Sep 6, 2026 Distribution Patch
- Sep 6, 2026 Security Advisory
- Sep 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:60511 advisory
- https://access.redhat.com/security/cve/CVE-2026-3446 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://images.redhat.com/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60511.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2457410 issue
- https://www.cve.org/CVERecord?id=CVE-2026-3446 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-3446 advisory
- https://github.com/python/cpython/commit/1f9958f909c1b41a4ffc0b613ef8ec8fa5e7c474 advisory
- https://github.com/python/cpython/commit/4561f6418a691b3e89aef0901f53fe0dfb7f7c0e advisory
- https://github.com/python/cpython/commit/e31c55121620189a0d1a07b689762d8ca9c1b7fa advisory
- https://github.com/python/cpython/issues/145264 advisory
- https://github.com/python/cpython/pull/145267 advisory
- https://mail.python.org/archives/list/security-announce@python.org/thread/F5ZT5ICGJ6CKXVUJ34YBVY7WOZ5SHG53/ advisory