CVE catalog

CVE-2024-8946

Micropython vulnerabilities

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.01% · Oct 25, 2026

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntumicropythonnoble1.22.1+ds-1ubuntu0.24.04.1~esm1fixed
Ubuntumicropython-docnoble1.22.1+ds-1ubuntu0.24.04.1~esm1fixed
Debianmicropython131.24.0+ds-1fixed
Debianmicropython141.24.0+ds-1fixed
Ubuntumicropythonpro1.19.1+ds-1vulnerable
Ubuntumicropythonpro1.22.1+ds-1vulnerable
Ubuntumicropythonpro1.22.1+ds-1build1vulnerable
Ubuntumicropythonpro1.22.1+ds-1build2vulnerable
Ubuntumicropythonpro1.22.1+ds-1ubuntu0.24.04.1~esm1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntumicropythondebnoble1.22.1+ds-1ubuntu0.24.04.1~esm1Not reportedNot reportedNot reported
Ubuntumicropython-docdebnoble1.22.1+ds-1ubuntu0.24.04.1~esm1Not reportedNot reportedNot reported
Debianmicropythondeb131.24.0+ds-1Not reportedDEBIAN-CVE-2024-8946Not reported
Debianmicropythondeb141.24.0+ds-1Not reportedDEBIAN-CVE-2024-8946Not reported
Ubuntumicropythondebpro1.22.1+ds-1ubuntu0.24.04.1~esm1Not reportedUBUNTU-CVE-2024-8946Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [micropython]Fixed
    Details (2)

    • 1.25.0+ds-1 · amd64 · trixie

      Fixed · Fixed: 1.24.0+ds-1

      usn · micropython · debian · 13

    • 1.25.0+ds-1 · arm64 · trixie

      Fixed · Fixed: 1.24.0+ds-1

      usn · micropython · debian · 13

  • [micropython-doc]Fixed

    Source package: [micropython]

    Details (2)

    • 1.25.0+ds-1 · all · trixie

      Fixed · Fixed: 1.24.0+ds-1

      usn · micropython · debian · 13

    • 1.25.0+ds-1 · all · trixie

      Fixed · Fixed: 1.24.0+ds-1

      usn · micropython · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Ubuntu Security Notices (USN)]