HIGH 7.5 Microsoft

CVE-2020-10735

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases when using int("text") a system could take 50ms to parse an int string with 100000 digits and 5s for 1000000 digits (float decimal int.from_bytes() and int() for binary bases 2 4 8 16 and 32 are not affected). The highest threat from this vulnerability is to system availability.

Microsoft Security Update 2022-Sep: A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases when using int("text") a system could take 50ms to parse an int string with 100000 digits and 5s for 1000000 digits (float decimal int.from_bytes() and int() for binary bases 2 4 8 16 and 32 are not affected). The highest threat from this vulnerability is to system availability.

Affected Products

References

Published: 2022-09-13 · Source: Microsoft · Feed updated: 2026-08-14
This high severity vulnerability with a CVSS score of 7.5 was published on 2022-09-13 via Microsoft. EPSS score: 5.7% (top 8% of all CVEs by exploitation probability). Affected: cm1 python3 3.7.16-1 on CBL Mariner 1.0.
vulnfeed aggregates 10939 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.