PT-2026-32017
CVE-2026-3446
·
Published
2026-02-26
·
Updated
2026-10-20
Description by
CVSS 4.0
6.0
MediumMetricsAV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
Base64 (affected versions not specified)
Description
The decoding process using
base64.b64decode() or related functions would halt upon encountering the first padded quad, even if additional data remained. This could result in the acceptance of data that might be handled differently by other implementations. Using "validate=True" enables stricter base64 data processing.Recommendations
Utilize "validate=True" when calling
base64.b64decode() or related functions to enforce stricter base64 data processing.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾