Executive brief
PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators
Affected products
- crates.io pyo3
Junglewise Threat Intelligence
PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators
Severity: medium · CVSS 4 · Published 2026-06-12
Technologies: pyo3 (crates.io). Vendors: crates.io.
Related threats
- PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures
- PyO3 missing Sync bound in PyCFunction new_closure
- PyO3 out-of-bounds read in list and tuple iterators
- RUSTSEC-2026-0177 - Missing `Sync` bound on `PyCFunction::new_closure` closures
- RUSTSEC-2026-0176 - Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators