CVE-2026-39892

Fixed in a distro release EPSS <1%CVSS 6.9

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.

Published 2026-04-08 · CVE record · OSV

Products: pyca cryptography, Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat AI Inference Server 3.3, Red Hat Ansible Automation Platform 2.6, Red Hat Discovery 2, Red Hat Enterprise Linux AI 3.3, Red Hat Hardened Images, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.3, Red Hat Quay 3.10, Red Hat Quay 3.12, Red Hat Quay 3.14, Red Hat Quay 3.15, Red Hat Quay 3.16, Red Hat Quay 3.17, Red Hat Quay 3.9, Red Hat Trusted Artifact Signer 1.4, Red Hat Lightspeed Core, Red Hat Migration Toolkit for Applications 8, Red Hat OpenShift Lightspeed, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, Red Hat Ansible Automation Platform Ansible Core 2, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI), Red Hat Quay 3, Red Hat Satellite 6

Fixed upstream

Distro releases