What is GHSA-p8vw-m6qq-w42v?

GHSA-p8vw-m6qq-w42v is a security advisory published by GitHub Security Advisories with Medium severity. read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...

Which CVE IDs does GHSA-p8vw-m6qq-w42v cover?

GHSA-p8vw-m6qq-w42v covers the following CVE IDs: CVE-2022-48564. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p8vw-m6qq-w42v?

GHSA-p8vw-m6qq-w42v has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-p8vw-m6qq-w42vMediumCVSS 6.5

read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...

Vendor

GitHub Security Advisories

Published

August 22, 2023

Last Modified

November 3, 2026

🔗 CVE IDs covered (1)

CVE-2022-48564 →

📋 Description

read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-48564
https://bugs.python.org/issue42103
https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
https://security.netapp.com/advisory/ntap-20230929-0009
https://github.com/advisories/GHSA-p8vw-m6qq-w42v