QwikSec

Security Database

CVE

CWE

Training

CVE-2026-39892

Published: Apr 8, 2026

Modified: Apr 9, 2026

PUBLISHED

Description

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.

Vendor	Product	Versions
pyca	cryptography	affected `>= 45.0.0, < 46.0.7`

Weaknesses (CWE)

References

https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.