https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 10:29:10 +0000 https://vulnerability.circl.lu/vuln/cve-2024-12254 <p><strong>Affected:</strong> Python Software Foundation CPython, python_software_foundation cpython</p> <p>Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not &#34;pause&#34; writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the &#34;high-water mark&#34;. Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhaustion.</p> <p>This vulnerability likely impacts a small number of users, you must be using Python 3.12.0 or later, on macOS or Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true then your usage of Python is unaffected.</p> <p><strong>Affected:</strong> Python Software Foundation CPython, python_software_foundation cpython</p> <p>Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not &#34;pause&#34; writing and signal to the Protocol to drain the buffer to the wire once the write buffer reached the &#34;high-water mark&#34;. Because of this, Protocols would not periodically drain the write buffer potentially leading to memory exhaustion.</p> <p>This vulnerability likely impacts a small number of users, you must be using Python 3.12.0 or later, on macOS or Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true then your usage of Python is unaffected.</p> https://vulnerability.circl.lu/vuln/cve-2024-12254