5.9
Medium
CVE-2023-49083 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
Description
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| cryptography 3.1 | 3.1 → < 41.0.6 | 41.0.6 |
References
- github.com github.com
- github.com github.com
- github.com github.com
- lists.fedoraproject.org lists.fedoraproject.org
Timeline
- Published
- Last modified
Other CVEs of cryptography
The 9 CVEs of cryptography →
CVE-2026-69249
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
8.7
High
CVE-2026-69248
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
6.9
Medium
CVE-2026-69247
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
8.2
High
CVE-2026-39892
cryptography has a buffer overflow if non-contiguous buffers were passed to APIs
6.9
Medium