Description
Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.
Remediation
References
Related Vulnerabilities
Moodle Exposure of Resource to Wrong Sphere Vulnerability (CVE-2022-40316)
WordPress Plugin CAPTCHA in Thai Multiple Cross-Site Scripting Vulnerabilities (1.1)
WordPress Plugin Justified Gallery Unspecified Vulnerability (1.4.1)
WordPress Plugin WP Mobile Edition Multiple Vulnerabilities (2.4)
phpMyAdmin Improper Input Validation Vulnerability (CVE-2009-1149)