Get real-time updates on Telegram
P5Verified
CVE-2024-3220: CPython 0 to before 3.16.0
CVE-2024-3220. EPSS 0.00521 (percentile 0.4267), scored 13-Oct-2026.
Affected technology
CPython · 0 to before 3.16.0
Python Software Foundation
Component: mimetypes
Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
File locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the incorrect file type. Vendor/CNA’s CVSS 4.0 assessment (base score 2.3/10) rates confidentiality impact as none; integrity and availability impact as low.
- CWE
- CWE-426
- CCR priority
- 0.1 /100 (P5)
- EPSS
- 0.00521 · percentile 0.4267 · 2026-10-13
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-15 01:13:25.227066+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 01:07:31.726917+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2024-3220.html