CVE-2022-48560

Updated: 2025-08-20 03:03:38.572006

Description:

A use-after-free exists in Python through 3.9 via heappushpop in heapq.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

Debian 10 python 3.6 7.5 HIGH Already Fixed 2025-09-05 09:16:57
Debian 10 python 2.7 7.5 HIGH Released CLSA-2025:1760024436 2025-10-10 00:48:54
Debian 11 python 2.7 7.5 HIGH Released CLSA-2025:1760093456 2025-10-10 11:26:01
Debian 11 python 3.6 7.5 HIGH Already Fixed 2025-09-05 09:16:56
Debian 12 python 3.9 7.5 HIGH Not Vulnerable 2025-12-05 14:56:58
Debian 12 python 3.7 7.5 HIGH Not Vulnerable 2025-11-21 15:05:06
Debian 12 python 3.6 7.5 HIGH Already Fixed 2025-09-05 09:16:56
Debian 12 python 2.7 7.5 HIGH Released CLSA-2025:1760093575 2025-10-10 11:25:59
Debian 12 python 3.8 7.5 HIGH Not Vulnerable 2025-11-21 15:05:06
Debian 13 python 3.9 7.5 HIGH Not Vulnerable 2025-12-05 14:56:58
Total: 32