2.4

CVE-2026-18503

Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()

Attacker-controlled CSV samples can trigger super-linear 
regular-expression work during dialect sniffing and consume significant 
CPU when applications pass unbounded input to csv.Sniffer.sniff().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerPython Software Foundation
≫
Produkt CPython
Default Statusunaffected
Version 0
Version < 3.10.21
Status affected
Version 3.11.0
Version < 3.11.16
Status affected
Version 3.12.0
Version < 3.12.14
Status affected
Version 3.13.0
Version < 3.13.15
Status affected
Version 3.14.0
Version < 3.14.7
Status affected
Version 3.15.0a1
Version < 3.15.0rc1
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.021
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
cna@python.org 2.4 0 0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-1176 Inefficient CPU Computation

The product performs CPU computations using algorithms that are not as efficient as they could be for the needs of the developer, i.e., the computations can be optimized further.

https://mail.python.org/archives/list/security-announce@python.org/thread/KQ7NBMCPAZJHRROQXJQE4GMXGLD5KHBS/
https://github.com/python/cpython/pull/153694
https://github.com/python/cpython/issues/98820
https://github.com/python/cpython/commit/063d4555c94ef412c731527dbf30193327f2ee82
https://github.com/python/cpython/commit/476fb09cdb0d73e645849d98c610e7e5697ce7c9
https://github.com/python/cpython/commit/89f29c760c02774b099ddd6863268eb13fa3946a
https://github.com/python/cpython/commit/b30c7fa9edd921a118f286e9f90f560777fa693b
https://github.com/python/cpython/commit/b09a67a20c464f8288c9f9a6b9c7082a74560024
https://github.com/python/cpython/commit/fd78b565d7c326f96ae903ab945b47f35d829cf4