Internet Bug Bounty · Report #172403
Python 2.7 32-bit JSON encoding heap corruption
Validstatus
lowseverity
5upvotes
13 Oct 2019disclosed
How it was found
https://bugs.python.org/issue28284 https://hg.python.org/cpython/rev/9375c8834448
Among other things this vulnerability will be triggered when JSON-encoding a dict with a very large key:
python -c 'import json; json.dumps({chr(0x22)*0x2AAAAAAB:0})'