4.8
Medium
CVE-2026-1998 A flaw has been found in micropython up to 1.27.0
Description
A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mp_import_all of the file py/runtime.c. This manipulation causes memory corruption. The attack needs to be launched locally. The exploit has been published and may be used. Patch name: 570744d06c5ba9dba59b4c3f432ca4f0abd396b6. It is suggested to install a patch to address this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MicroPython | 1.27.0 | No fix stated |
| MicroPython | 1.26 | No fix stated |
| MicroPython | 1.25 | No fix stated |
| MicroPython | 1.24 | No fix stated |
| MicroPython | 1.23 | No fix stated |
| MicroPython | 1.22 | No fix stated |
| MicroPython | 1.21 | No fix stated |
| MicroPython | 1.20 | No fix stated |
| MicroPython | 1.19 | No fix stated |
Show the 19 other branches Hide the 19 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| MicroPython | 1.18 | No fix stated |
| MicroPython | 1.17 | No fix stated |
| MicroPython | 1.16 | No fix stated |
| MicroPython | 1.15 | No fix stated |
| MicroPython | 1.14 | No fix stated |
| MicroPython | 1.13 | No fix stated |
| MicroPython | 1.12 | No fix stated |
| MicroPython | 1.11 | No fix stated |
| MicroPython | 1.10 | No fix stated |
| MicroPython | 1.9 | No fix stated |
| MicroPython | 1.8 | No fix stated |
| MicroPython | 1.7 | No fix stated |
| MicroPython | 1.6 | No fix stated |
| MicroPython | 1.5 | No fix stated |
| MicroPython | 1.4 | No fix stated |
| MicroPython | 1.3 | No fix stated |
| MicroPython | 1.2 | No fix stated |
| MicroPython | 1.1 | No fix stated |
| MicroPython | 1.0 | No fix stated |