CVE-2022-48560
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Published Aug 22, 2023 · updated Oct 14, 2026 · python python
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Aug 22, 2023 · NIST NVD
Detected
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Oct 14, 2026 · NIST NVD
Updated
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Affected
- cpe debian/debian linux10.0
- cpe python/pythonversion unspecified
- cpe python/python3.9.0
Sources
- CVE.orgVulnerability recordCVE-2022-48560
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2022-48560
30-day exploitation probability 2.0%
first.org - NIST NVDVulnerability recordCVE-2022-48560
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
nvd.nist.gov