NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-3298
Summary

The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.

Publication Date April 22, 2026, 12:16 a.m.
Registration Date April 25, 2026, 4:03 a.m.
Last Update April 22, 2026, 6:16 a.m.
Related information, measures and tools
Common Vulnerabilities List