CVE-2026-3298

Name of the Vulnerable Software and Affected Versions Python (affected versions not specified)

Description On Windows systems, the sock recvfrom into() function within asyncio.ProacterEventLoop lacks a boundary check for the data buffer when the nbytes parameter is used. This flaw can lead to an out-of-bounds buffer write if the received network data exceeds the buffer size, potentially resulting in memory corruption, system crashes, or arbitrary code execution. Non-Windows platforms are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.