Crítica

A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manip

Publicada: 29.12.2023
Actualizado: 11.10.2026 11:19

A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manipulation leads to use after free. The exploit has been disclosed to the public and may be used. The patch is identified as 8b24aa36ba978eafc6114b6798b47b7bfecdca26. It is recommended to apply a patch to fix this issue. VDB-249158 is the identifier assigned to this vulnerability.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

Plataforma	Paquete	Versiones vulnerables	Corregida en
Python (PyPI)	micropython-copy	todas las versiones	sin corrección
Python (PyPI)	micropython-io	todas las versiones	sin corrección
Python (PyPI)	micropython-os	todas las versiones	sin corrección
Python (PyPI)	micropython-select	todas las versiones	sin corrección

Referencias

Puntuación CVSS 9.8/10

Vector CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Debilidad (CWE): -
Plataforma: Python (PyPI)
Paquete: micropython-copy, micropython-io, micropython-os
Publicada: 29.12.2023
Actualizado: 11.10.2026 11:19

Fuentes y licencias

OSV / GitHub Advisory Database - PYSEC-2023-256 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2023-257 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2023-258 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2023-259 - PyPA Advisory Database; CC BY 4.0

Historial de vulnerabilidades: micropython-copy

Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Entradas en total: 4
Primera → última: 12.2023 09.2024
Sin corrección: 4
Explotada en ataques: 0

Distribución por gravedad

Crítica 1
Alta 3

Divulgaciones por año

2023: 1
2024: 3
2025: 0
2026: 0

17.09.2024

A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulat

Alta · 7.5 CVE-2024-8946 todas las versiones sin corrección
17.09.2024

A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use a

Alta · 8.1 CVE-2024-8947 todas las versiones sin corrección
17.09.2024

A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffer

Alta · 7.5 CVE-2024-8948 todas las versiones sin corrección
29.12.2023

A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manip esta entrada

Crítica · 9.8 CVE-2023-7152 todas las versiones sin corrección

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación