Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
py-lmdb library can corrupt memory with malicious data file
published 4 months ago
Summary
The Python LMDB package (version 0.97) may try to write to the wrong place in memory when it processes a specially crafted LMDB database file. An attacker who can make your system open such a file could cause the program to crash or behave unpredictably. Upgrade to a newer version of py-lmdb or avoid opening untrusted LMDB files until the fix is applied.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | lmdb | All versions |
Original advisory text
ECHO-e174-ee41-e2ae
References
Timeline
Published3 Jul 2026
Updated4 Jul 2026
First seen4 Jul 2026
Sources
ECHO-e174-ee41-e2ae · OSV
Track software like this
Free during beta