Most recent entries from all

CVE-2026-39892 — cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

Affected: pyca cryptography, Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat AI Inference Server 3.3, Red Hat Ansible Automation Platform 2.6, Red Hat Discovery 2, Red Hat Enterprise Linux AI 3.3, Red Hat Hardened Images, Red Hat OpenShift AI 2.25 and 21 more

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.

GHSA-p423-j2cm-9vmq — Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs

Affected: PyPI: cryptography

If a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. `Hash.update()`), this could lead to buffer overflows. For example:

```python h = Hash(SHA256()) b.update(buf[::-1]) ```

would read past the end of the buffer on Python >3.11

PYSEC-2026-36

Affected: PyPI: cryptography