Internet Bug Bounty · Report #216151
Use-after-free in _asyncio_Future_remove_done_callback
Validstatus
lowseverity
$500bounty
2upvotes
12 Nov 2019disclosed
How it was found
http://bugs.python.org/issue28963
Callbacks could be removed from a list while it was iterated, leading to an out of bounds access. A fix for this bug is now in the CPython repository.