Array index error in the scanstring function in the json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the rawdecode function.
{ "cwe_ids": [] }
{ "vanir_signatures": [ { "digest": { "length": 2300.0, "function_hash": "25106426419632792795838985375593720378" }, "signature_version": "v1", "signature_type": "Function", "source": "https://github.com/python/cpython/commit/6c939cb6f6dfbd273609577b0022542d31ae2802", "deprecated": false, "target": { "file": "Modules/_json.c", "function": "scan_once_str" }, "id": "PSF-2017-1-0f821b3e" }, { "digest": { "length": 2273.0, "function_hash": "263486496255626229186014659436588529555" }, "signature_version": "v1", "signature_type": "Function", "source": "https://github.com/python/cpython/commit/6c939cb6f6dfbd273609577b0022542d31ae2802", "deprecated": false, "target": { "file": "Modules/_json.c", "function": "scan_once_unicode" }, "id": "PSF-2017-1-32d8e346" }, { "digest": { "line_hashes": [ "39906423719261988284585508931271658784", "131385314209771341919080367417872108620", "314508523876734961570135285826436514611", "119114297336911049877924617937479190808", "273338037574117324863793143385052696212", "160733641363203805085925255673566536857", "324414043392332063980459565824122408513", "119114297336911049877924617937479190808" ], "threshold": 0.9 }, "signature_version": "v1", "signature_type": "Line", "source": "https://github.com/python/cpython/commit/6c939cb6f6dfbd273609577b0022542d31ae2802", "deprecated": false, "target": { "file": "Modules/_json.c" }, "id": "PSF-2017-1-3783e2be" }, { "digest": { "length": 2273.0, "function_hash": "263486496255626229186014659436588529555" }, "signature_version": "v1", "signature_type": "Function", "source": "https://github.com/python/cpython/commit/99b5afab74428e5ddfd877bdf3aa8a8c479696b1", "deprecated": false, "target": { "file": "Modules/_json.c", "function": "scan_once_unicode" }, "id": "PSF-2017-1-850639fe" }, { "digest": { "line_hashes": [ "273338037574117324863793143385052696212", "160733641363203805085925255673566536857", "324414043392332063980459565824122408513", "119114297336911049877924617937479190808" ], "threshold": 0.9 }, "signature_version": "v1", "signature_type": "Line", "source": "https://github.com/python/cpython/commit/99b5afab74428e5ddfd877bdf3aa8a8c479696b1", "deprecated": false, "target": { "file": "Modules/_json.c" }, "id": "PSF-2017-1-d34bf227" } ] }