REDHAT-BUG-2456735: Buffer Overflow
Published Apr 8, 2026
·Updated
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.
Affected Software
1 affected component
pypi/cryptography>=45.0.0<46.0.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cryptographyto a version that resolves this vulnerability.Fixed in 46.0.7
Event History
Apr 8, 2026
Data Sourced
via Red Hat·10:01 PM
DescriptionSeverityAffected Software