CVE-2026-115778: Python Unbounded Network Receive Buffer
$FUNC appends network-received data to the per-connection buffer self.$BUF without any length cap. A peer can withhold the protocol end-of-record terminator (e.g. Telnet IAC SE) while continuing to send bytes, so the persistent buffer grows without bound across receive calls and exhausts process memory, terminating every service hosted in the process. Cap th
Pythongreprules fetch cve-2026-115778-python-unbounded-network-receive-buffer --engine opengrepDescription
$FUNC appends network-received data to the per-connection buffer self.$BUF without any length cap. A peer can withhold the protocol end-of-record terminator (e.g. Telnet IAC SE) while continuing to send bytes, so the persistent buffer grows without bound across receive calls and exhausts process memory, terminating every service hosted in the process. Cap th
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.