Logo
vulnerabilityCVE-2026-3446
Name
CVE-2026-3446
Source
NVD ( link)Debian ( link)
Description
When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use "validate=True" to enable stricter processing of base64 data.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
python3
Exploitable

Vulnerability Ratings#


6
CVSSv4
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
3.12.14
Exploitable
buildroot
master
3.14.7
Not Affected
openwrt
master
3.14.5-r2
Not Affected
openwrt
openwrt-25.12
3.13.9-r3
Exploitable
yocto
master
3.14.7
Not Affected
yocto
scarthgap
3.12.13
Exploitable