CVE-2025-13837: Out-of-memory when loading Plist
Out-of-memory when loading Plist
Other sources
When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.9.19-20 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.12.9-7
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13837?
CVE-2025-13837 has been classified as a high severity vulnerability due to its potential to cause out-of-memory (OOM) and Denial of Service (DoS) issues.
How do I fix CVE-2025-13837?
To mitigate CVE-2025-13837, ensure you are using the latest patched version of Python Software Foundation Python and plistlib.
What impact does CVE-2025-13837 have on my application?
CVE-2025-13837 can lead to application crashes or service downtime if a malicious plist file is processed.
Is CVE-2025-13837 a remote code execution vulnerability?
CVE-2025-13837 does not allow for remote code execution but can cause denial of service due to resource exhaustion.
Which versions of Python are affected by CVE-2025-13837?
CVE-2025-13837 affects all versions of Python that utilize the plistlib module without the necessary safeguards against malicious file inputs.