CVE-2023-7158

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-7158
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-7158.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-7158
Downstream
Related
Published
2023-12-29T06:31:04.450Z
Modified
2026-07-15T01:49:06.678328649Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
MicroPython objslice.c slice_indices heap-based overflow
Details

A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the file objslice.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.22.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-249180.

Database specific 
{
    "cwe_ids": [
        "CWE-122"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/7xxx/CVE-2023-7158.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "1.13.0"
                },
                {
                    "last_affected": "1.13.0"
                },
                {
                    "introduced": "1.14.0"
                },
                {
                    "last_affected": "1.14.0"
                },
                {
                    "introduced": "1.15.0"
                },
                {
                    "last_affected": "1.15.0"
                },
                {
                    "introduced": "1.16.0"
                },
                {
                    "last_affected": "1.16.0"
                },
                {
                    "introduced": "1.17.0"
                },
                {
                    "last_affected": "1.17.0"
                },
                {
                    "introduced": "1.18.0"
                },
                {
                    "last_affected": "1.18.0"
                },
                {
                    "introduced": "1.19.0"
                },
                {
                    "last_affected": "1.19.0"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/micropython/micropython

Affected ranges

Type
GIT
Repo
https://github.com/micropython/micropython
Events
Introduced
294baf52b346e400e2255c6c1e82af5b978b18f7
Fixed
9feb0689eeaca5ce88aedcc680f997a3b4d0221c
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:micropython:micropython:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.20.0"
        },
        {
            "last_affected": "1.20.0"
        },
        {
            "introduced": "1.21.0"
        },
        {
            "last_affected": "1.21.0"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "1.22.0"
        }
    ]
}

Affected versions

1.*
1.20.0
1.21.0
v1.*
v1.20.0
v1.21.0
v1.22.0-preview

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-7158.json"