High, CVSS 7.1PyPIAmendedPublished
Integer overflow in pywin32
CVE-2021-32559 · GHSA-hwfp-hg2m-9vr2
- Affected
- PyPI pywin32 < 301
- Fixed in
- 301· Vendor fix available
- Issue
- An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could crash the vulnerable process.
Recommended action: Upgrade to 301 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.