GitHub Advisoryadvisory · PyPI

GHSA-hwfp-hg2m-9vr2 Integer overflow in pywin32

HIGH Published 2021-08-09 Modified 2025-03-27 Official page ↗
Aliases
CVE-2021-32559
Ecosystem
PyPI
Packages
pywin32
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-190
Reviewed
2021-07-07

Affected packages

• PyPI pywin32: < 301 → fixed in 301

Description

An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could crash the vulnerable process.

Related

Alias · CVE (1)

  • CVE-2021-32559 An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that… vulnerability

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References