CyberRota Analysis
AI-GeneratedPython's handling of crafted zip files using bzip, LZMA, or Zstandard compression methods is vulnerable to a memory exhaustion attack due to the potential for an attacker to control the pre-allocated memory size during decompression. This could lead to denial of service conditions, particularly affecting applications that process untrusted zip files. Organizations utilizing Python for file handling should prioritize patching or implementing mitigations to prevent exploitation of this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion.