Python Vulnerability in Integer Parsing Affects Performance

CVE-2020-10735

Summary

A performance-related flaw in Python's integer parsing mechanism can lead to significant delays when processing large non-binary integer strings. Specifically, operations using quadratic time complexity can cause a system to take up to 5 seconds to parse integers consisting of 1,000,000 digits, severely affecting overall system availability and performance. This issue primarily impacts applications relying on the int() function for conversion of extensive numeric strings, highlighting the need for optimization in handling large inputs.

References