📜🤖 Added by blurb_it.

python · serhiy-storchaka · Jun 29, 2025 · Jun 27, 2025 · Jun 27, 2025 · Jun 27, 2025
commit 7c95d8f323c6b55e54d74072f50a86810ba23279
diff --git a/Misc/NEWS.d/next/Security/2025-06-27-20-14-11.gh-issue-136053._pnEv0.rst b/Misc/NEWS.d/next/Security/2025-06-27-20-14-11.gh-issue-136053._pnEv0.rst
@@ -0,0 +1 @@
+Fix a potential out-of-bounds memory access vulnerability in the ``TYPE_SLICE`` case of the ``r_object`` function in ``marshal.c``. The code now properly checks if ``r_ref_reserve()`` fails before using its return value, preventing crashes or security issues when deserializing malicious marshal data.
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		Fix a potential out-of-bounds memory access vulnerability in the ``TYPE_SLICE`` case of the ``r_object`` function in ``marshal.c``. The code now properly checks if ``r_ref_reserve()`` fails before using its return value, preventing crashes or security issues when deserializing malicious marshal data.
akshat62 marked this conversation as resolved. Show resolved Hide resolved