Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mp_import_all of the file py/runtime.c. This manipulation causes memory corruption. The attack needs to be launched locally. The exploit has been published and may be used. Patch name: 570744d06c5ba9dba59b4c3f432ca4f0abd396b6. It is suggested to install a patch to address this issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-1998 A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mp_import_all of the file py/runtime.c. This manipulation causes memory corru… https://www.cve.org/CVERecord?id=CVE-2026-1998
Post summary
The post announces a memory corruption flaw in Micropython up to version 1.27.0 affecting the mp_import_all function in py/runtime.c.
CVE-2026-1998 MicroPython Local Memory Corruption Vulnerability in Import Function Up to 1.27.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1998
Post summary
MicroPython CVE-2026-1998 is a local memory corruption flaw in the import function affecting versions up to 1.27.0; no PoC, exploit, patch, or active exploitation details are mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | micropython | micropython | - | - | - |