7.5
Élevée
CVE-2024-26130 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
Description
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did not match the provided private key and an `encryption_algorithm` with `hmac_hash` set (via `PrivateFormat.PKCS12.encryption_builder().hmac_hash(...)`, then a NULL pointer dereference would occur, crashing the Python process. This has been resolved in version 42.0.4, the first version in which a `ValueError` is properly raised.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| cryptography 38.0 | 38.0.0 → < 42.0.4 | 42.0.4 |
| cryptography 38.0 | 38.0.0 → < 42.04 | 42.04 |
Références
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de cryptography
Les 9 CVE de cryptography →
CVE-2026-69249
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
8.7
Élevée
CVE-2026-69248
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
6.9
Moyenne
CVE-2026-69247
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
8.2
Élevée
CVE-2026-39892
cryptography has a buffer overflow if non-contiguous buffers were passed to APIs
6.9
Moyenne