https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 11:43:57 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-102734 <p>asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits from_address memory access. safe_getattr blocks the ctypes module but not reachable ctypes type objects, while attribute assignments use unfiltered setattr instead of safe_setattr. An attacker-controlled expression can derive an address with id, read memory through from_address, and write through an attribute assignment. The expression can read or corrupt arbitrary process memory, escape the intended sandbox, execute code, disclose secrets, or crash the host process. This issue is fixed in version 1.0.9.</p> <p>asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits from_address memory access. safe_getattr blocks the ctypes module but not reachable ctypes type objects, while attribute assignments use unfiltered setattr instead of safe_setattr. An attacker-controlled expression can derive an address with id, read memory through from_address, and write through an attribute assignment. The expression can read or corrupt arbitrary process memory, escape the intended sandbox, execute code, disclose secrets, or crash the host process. This issue is fixed in version 1.0.9.</p> https://db.gcve.eu/vuln/fkie_cve-2026-102734 https://db.gcve.eu/vuln/ghsa-9w56-46f6-3qhx <p><strong>Affected:</strong> PyPI: asteval</p> <p>### Summary With its default configuration (numpy enabled, `import` disabled), asteval&#39;s `Interpreter` lets an attacker-controlled expression obtain a raw **arbitrary process-memory read and write** primitive, without using `import`, any `__dunder__` attribute, or `eval`/`exec`/`getattr`. Arbitrary in-process read/write is equivalent to arbitrary code execution and is a complete escape of the sandbox whose entire purpose is &#34;untrusted string in, no arbitrary execution out.&#34; Any application that feeds untrusted input to asteval with numpy installed (the default) is affected.</p> <p>### Details asteval&#39;s attribute filter (`asteval/astutils.py: safe_getattr`) blocks every `__dunder__` name and blocks objects whose attribute value is *identity-equal* to one of the modules in `UNSAFE_MODULES = {io, os, sys, ctypes}`. The `ctypes` **module** entry was added recently (commit 9d9d430) and correctly blocks `ndarray.ctypes._ctypes`.</p> <p>However, the module check is identity-only against the ctypes *module*. It does not cover ctypes **type objects** and their metaclass methods, which are reachable through numpy&#39;s `ndarray.ctypes` wrapper using only ordinary (non-dunder) attribute names:</p> <p>zeros(1, dtype=int32).ctypes.shape._type_ -&gt; &lt;class &#39;ctypes.c_long&#39;&gt;</p> <p>`ndarray.ctypes` exposes `.shape` (a ctypes array) whose element type `._type_` is `ctypes.c_long`. None of `ctypes`, `.shape`, `._type_` is a dunder, none is in `UNSAFE_ATTRS`, and the returned value is a *type*, not the ctypes mod…</p> <p><strong>Affected:</strong> PyPI: asteval</p> <p>### Summary With its default configuration (numpy enabled, `import` disabled), asteval&#39;s `Interpreter` lets an attacker-controlled expression obtain a raw **arbitrary process-memory read and write** primitive, without using `import`, any `__dunder__` attribute, or `eval`/`exec`/`getattr`. Arbitrary in-process read/write is equivalent to arbitrary code execution and is a complete escape of the sandbox whose entire purpose is &#34;untrusted string in, no arbitrary execution out.&#34; Any application that feeds untrusted input to asteval with numpy installed (the default) is affected.</p> <p>### Details asteval&#39;s attribute filter (`asteval/astutils.py: safe_getattr`) blocks every `__dunder__` name and blocks objects whose attribute value is *identity-equal* to one of the modules in `UNSAFE_MODULES = {io, os, sys, ctypes}`. The `ctypes` **module** entry was added recently (commit 9d9d430) and correctly blocks `ndarray.ctypes._ctypes`.</p> <p>However, the module check is identity-only against the ctypes *module*. It does not cover ctypes **type objects** and their metaclass methods, which are reachable through numpy&#39;s `ndarray.ctypes` wrapper using only ordinary (non-dunder) attribute names:</p> <p>zeros(1, dtype=int32).ctypes.shape._type_ -&gt; &lt;class &#39;ctypes.c_long&#39;&gt;</p> <p>`ndarray.ctypes` exposes `.shape` (a ctypes array) whose element type `._type_` is `ctypes.c_long`. None of `ctypes`, `.shape`, `._type_` is a dunder, none is in `UNSAFE_ATTRS`, and the returned value is a *type*, not the ctypes mod…</p> https://db.gcve.eu/vuln/ghsa-9w56-46f6-3qhx