CVE-2026-39892
Aliases:GHSA-p423-j2cm-9vmqPYSEC-2026-36DEBIAN-CVE-2026-39892ALPINE-CVE-2026-39892CGA-25cm-55hx-x57vCGA-2frv-2p3m-pwfxCGA-2g9v-mq62-jp98CGA-3744-5897-rp65CGA-3jjr-9ffc-899rCGA-3m8g-wcvf-jmgmCGA-433j-hx2r-292wCGA-52gc-5c64-w3v5CGA-5fp3-33mf-84j2CGA-5rp9-2hm7-v8wcCGA-6w35-pcmh-j956CGA-7vm9-4w63-8997CGA-82q7-2gfx-whx6CGA-83w4-g9m2-h9v8CGA-847v-c9f4-cf9xCGA-85x5-55xg-xpp7CGA-9g4h-h758-7c7hCGA-9mmj-p792-mw27CGA-9rxx-rh3q-7rffCGA-cj2q-prmq-cvh2CGA-f5h9-jr7m-7hchCGA-f98g-cjvh-ff58CGA-g43f-3pg7-cf8vCGA-hcxf-69q6-qqgrCGA-hh3j-4gwj-w87pCGA-j336-2w68-m9qqCGA-m3qf-4r9q-452hCGA-mhcp-v3hq-3379CGA-p5x2-x3xx-pw3fCGA-pqr4-grr3-r2mjCGA-2368-mj4m-9336CGA-23pv-v83p-fqpvCGA-28jw-wj53-wph4CGA-2j3h-7vvq-w5j4CGA-2mrc-8h9x-m94mCGA-3h38-g9qp-52x5CGA-3jwh-jxf6-qq7qCGA-3r2p-h622-gxx9CGA-4jjv-pcp2-hmr6CGA-4qvc-7xjj-m5h7CGA-4v55-gj7r-h2m8CGA-52ch-x6qg-vxh5CGA-5j68-f799-v6r5CGA-62pv-mqq2-36wwCGA-649g-6x6h-5gfjCGA-6898-7pgf-rjrpCGA-7v8f-xq9p-885cCGA-8848-7p2w-f97pCGA-89xq-9whc-4x36CGA-8crc-f8hg-jx85CGA-8jhf-whj8-vmq5CGA-92vv-vx66-442hCGA-9945-hg93-8w8gCGA-9ff6-353v-57rfCGA-9fqm-qhcf-xrx5CGA-9rx6-vpqm-w4cwCGA-9vj2-ffff-5455CGA-c8mh-7wjv-rj77CGA-cfvw-r67p-v24cCGA-ch7r-6gvr-pcr6CGA-cmrx-66x5-vcxrCGA-cx9r-c2vf-vxvjCGA-f69w-33p7-xp26CGA-f767-64wp-cmrrCGA-fcg4-r7rc-w596CGA-fp95-c7hp-pg8wCGA-g292-52rg-68c4CGA-g7q5-36px-6494CGA-g82q-wjc6-5593CGA-gjw5-m554-2hw3CGA-gpjm-6hgv-ff3rCGA-gvjx-3jqr-vhcxCGA-gw72-7c99-m593CGA-h2m6-jj3w-qg6pCGA-h9m7-6xmx-vcgqCGA-hq3q-qx6m-8v84CGA-hqqx-j933-jcf4CGA-j83j-cvgg-fffpCGA-j952-4v2g-xx33CGA-jcgw-6vgr-cf3fCGA-jmj9-vqpq-j3f7CGA-m388-8cqv-m2fhCGA-m7c9-2fw6-5rchCGA-mqxw-jmjv-rw98CGA-prj2-qv9m-g9v5CGA-q424-f354-3x7gCGA-q735-vvh2-2xxmCGA-qcx8-xrj5-jm27CGA-qf4r-pgrx-5rhjCGA-qgx7-22hq-9p83CGA-qhvq-3gjr-mr9wCGA-qp8p-5mx5-24gcCGA-qwxr-25q8-xqvcCGA-r494-74cj-fjwcCGA-r9gr-6g79-qwm7CGA-rcxx-p63q-xp8rCGA-rh42-qvg9-rc4hCGA-rhmv-gqwx-g8j8CGA-rvqc-2q8f-rprjCGA-v2fm-v64p-x2jmCGA-w568-h2q4-h9wpCGA-w7j9-r696-73h5CGA-wcfj-xr2h-89w7CGA-wf7c-54xx-rw4cCGA-wjc8-573q-ghqcCGA-wjx5-725r-vh4jCGA-wxcg-cfwv-r3xwCGA-x3fj-3pfp-vchxCGA-xfmh-824v-w4g3CGA-xh7x-8p69-35vhCGA-xjw2-467p-h75rCGA-xw2g-g998-5qfmCGA-fg53-rxj4-h4cf
Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 08 Apr 2026, 20:49
Last modified:10 Sept 2026, 12:04
Vulnerability Summary
Overall Risk (default)
high
70/100 CVSS Score
9.8 CRITICAL
v3.1 (nvd)
EPSS Score
0.65% LOW
1% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
08 Apr 2026, 20:49
Published
Vulnerability first disclosed
10 Sept 2026, 12:04
Last Modified
Vulnerability information updated
Description
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.
CVSS Metrics
- v4.0•MEDIUM•Score: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- v4.0•MEDIUM•Score: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- v3.1•HIGH•Score: 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Trends
Current EPSS score: 0.65%• Percentile: 50%
Techniques & Countermeasures
- CWE-119•Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
- CWE-131•Incorrect Calculation of Buffer Size
The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
Affected Systems
- alpine•py3-cryptography
≥ 45.0.0, < 46.0.7-r0 | ≥ 45.0.0, < 46.0.7-r0
- chainguard•airflow-2
< 2.11.2-r8
- chainguard•airflow-3
< 3.2.0-r1
- chainguard•airflow-core-2
< 2.11.2-r5
- chainguard•airflow-core-3
< 3.2.0-r2
- chainguard•apache-beam-python-3.11-sdk
< 2.73.0-r6
- chainguard•apache-beam-python-3.12-sdk
< 2.72.0-r2
- chainguard•apache-beam-python-3.13-sdk
< 2.73.0-r4
- chainguard•authentik-2025.12
< 2025.12.4-r3
- chainguard•authentik-2026.2
< 2026.2.1-r3
- chainguard•barman-cloudnative-pg
< 3.18.0-r2
- chainguard•dagster
< 1.13.2-r0
- chainguard•dask-kubernetes
< 2026.3.0-r3
- chainguard•datadog-agent-7.71-core-integrations
< 7.71.2-r26
- chainguard•datadog-agent-7.72-core-integrations
< 7.72.4-r27
- chainguard•datadog-agent-7.73-core-integrations
< 7.73.3-r23
- chainguard•datadog-agent-7.74-core-integrations
< 7.74.1-r19
- chainguard•datadog-agent-7.75-core-integrations
< 7.75.4-r6
- chainguard•datadog-agent-fips-7.71-core-integrations
< 7.71.2-r20
- chainguard•datadog-agent-fips-7.72-core-integrations
< 7.72.4-r18
- chainguard•datadog-agent-fips-7.73-core-integrations
< 7.73.3-r17
- chainguard•datadog-agent-fips-7.74-core-integrations
< 7.74.1-r16
- chainguard•datadog-agent-fips-7.75-core-integrations
< 7.75.4-r4
- chainguard•dbt-snowflake
all | < 1.10.4-r4
- chainguard•ggshield
< 1.51.0-r5
- chainguard•gitlab-toolbox-ce-18.7
all
- chainguard•gitlab-toolbox-ce-fips-18.7
< 18.7.6-r2
- chainguard•in-toto
< 3.1.0-r0
- chainguard•jupyter-base-notebook
< 7.5.5-r4
- chainguard•k8s-sidecar
< 2.6.0-r0
- chainguard•kserve-storage-controller
< 0.16.0-r25
- chainguard•kubeflow-jupyter-web-app
< 1.10.0-r15
- chainguard•kubeflow-pipelines-visualization-server
< 2.16.0-r4
- chainguard•kubeflow-volumes-web-app
< 1.10.0-r16
- chainguard•label-studio
< 1.23.0-r3
- chainguard•localstack
< 4.14.0-r8
- chainguard•metaflow-service
< 2.5.0-r10
- chainguard•mitmproxy
< 12.2.2-r1
- chainguard•mlflow
< 3.16.0-r0
- chainguard•mycli
< 1.68.1-r0
- chainguard•nemo
< 2.7.2-r2
- chainguard•opal
< 0.9.4-r2
- chainguard•open-webui
< 0.8.12-r3
- chainguard•openstack-kolla-toolbox-2025.1
< 20.4.0-r5
- chainguard•openstack-kolla-toolbox-2025.2
< 21.1.0-r3
- chainguard•pgadmin4
< 9.14-r1
- chainguard•pgadmin4-fips
< 9.14-r1
- chainguard•py3-cassandra-medusa
< 0.27.1-r2
- chainguard•py3.11-prefect
< 3.7.3-r0
- chainguard•py3.12-prefect
< 3.7.3-r0
Showing first 50 affected entries in server-rendered view.
References (36)
- https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq
- https://github.com/pyca/cryptography
- http://www.openwall.com/lists/oss-security/2026/04/08/12
- https://nvd.nist.gov/vuln/detail/CVE-2026-39892
- https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2026-36.yaml
- https://access.redhat.com/security/cve/CVE-2026-39892
- https://bugzilla.redhat.com/show_bug.cgi?id=2456735
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39892.json
- https://access.redhat.com/errata/RHSA-2026:24761
- https://access.redhat.com/errata/RHSA-2026:24762
- https://access.redhat.com/errata/RHSA-2026:30089
- https://access.redhat.com/errata/RHSA-2026:30088
- https://access.redhat.com/errata/RHSA-2026:24866
- https://access.redhat.com/errata/RHSA-2026:20338
- https://access.redhat.com/errata/RHSA-2026:7295
- https://access.redhat.com/errata/RHSA-2026:24977
- https://access.redhat.com/errata/RHSA-2026:22629
- https://access.redhat.com/errata/RHSA-2026:21017
- https://access.redhat.com/errata/RHSA-2026:24853
- https://access.redhat.com/errata/RHSA-2026:19375
- https://access.redhat.com/errata/RHSA-2026:22465
- https://access.redhat.com/errata/RHSA-2026:22840
- https://access.redhat.com/errata/RHSA-2026:23361
- https://access.redhat.com/errata/RHSA-2026:24483
- https://access.redhat.com/errata/RHSA-2026:37275
- https://access.redhat.com/errata/RHSA-2026:42644
- https://access.redhat.com/errata/RHSA-2026:43855
- https://access.redhat.com/errata/RHSA-2026:43854
- https://access.redhat.com/errata/RHSA-2026:43851
- https://access.redhat.com/errata/RHSA-2026:43670
- https://access.redhat.com/errata/RHSA-2026:43853
- https://access.redhat.com/errata/RHSA-2026:43651
- https://access.redhat.com/errata/RHSA-2026:46956
- https://security-tracker.debian.org/tracker/CVE-2026-39892
- https://security.alpinelinux.org/vuln/CVE-2026-39892
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39892.json