2.1
/ 10
LOW
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:L/SA:N
Description
When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues
Basic Information
ID
CVE-2025-13837
Source
PSF
Published
Dec 1, 2025 at 18:13
Modified
Dec 1, 2025 at 19:00
Affected Product
Vendor
Python Software Foundation
Product
CPython
Affected Versions
Python Software Foundation CPython 0
References
- github.com /python/cpython/pull/119343
- github.com /python/cpython/issues/119342
- github.com /python/cpython/commit/694922cf40aa3a28f898b5f5ee08b71b4922df70
- github.com /python/cpython/commit/71fa8eb8233b37f16c88b6e3e583b461b205d1ba
- github.com /python/cpython/commit/b64441e4852383645af5b435411a6f849dd1b4cb