CVE-2025-62708: Python Unbounded Bytesio Decompression

Unbounded accumulation of data using write() in a decode loop without length limits can lead to memory exhaustion and Denial of Service (decompression bombs). Implement size constraints and raise an exception if limits are exceeded. [ignoring loop detection]

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2025-62708-python-unbounded-bytesio-decompression --engine opengrep

Description

Unbounded accumulation of data using write() in a decode loop without length limits can lead to memory exhaustion and Denial of Service (decompression bombs). Implement size constraints and raise an exception if limits are exceeded. [ignoring loop detection]