CVE-2022-48564

Name of the Vulnerable Software and Affected Versions Python versions prior to 3.9.2

Description The issue is related to the read ints function in the plistlib.py component of the Python interpreter, which is vulnerable to uncontrolled resource consumption. This can be exploited by a remote attacker to cause a denial of service. The vulnerability occurs when processing malformed Apple Property List files in binary format, leading to CPU and RAM exhaustion.

Recommendations For versions prior to 3.9.2, update to version 3.9.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the read ints function in plistlib.py to minimize the risk of exploitation. Avoid processing untrusted or malformed Apple Property List files in binary format until the issue is resolved.