Memory Management Vulnerability in Python's plistlib Module
CVE-2025-13837
2.1LOW
What is CVE-2025-13837?
The plistlib module in Python is susceptible to a denial of service due to its method of reading plist files. When a plist file specifies an unusually large size, it can cause the module to allocate excessive memory. This can lead to out-of-memory (OOM) issues, allowing an attacker to disrupt services by forcing the system into a state of resource exhaustion. It is essential for developers and system administrators to be aware of this vulnerability to implement appropriate safeguards.
Affected Version(s)
CPython 0 < 3.10.20
CPython 3.11.0 < 3.11.15
CPython 3.12.0 < 3.12.13