Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| simplejson(PyPI) | 0 | 2.6.1 | N/A |
CVSS Metrics
