Python 2.7 32-bit JSON encoding heap corruption

Disclosed: 2019-10-13 13:01:19 By guido To ibb
Low
Vulnerability Details
https://bugs.python.org/issue28284 https://hg.python.org/cpython/rev/9375c8834448 Among other things this vulnerability will be triggered when JSON-encoding a dict with a very large key: ``` python -c 'import json; json.dumps({chr(0x22)*0x2AAAAAAB:0})' ```
Actions
View on HackerOne
Report Stats
  • Report ID: 172403
  • State: Closed
  • Substate: resolved
  • Upvotes: 5
Share this report