<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: micropython</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-1998: A flaw has been found in micropython up to 1.27.0</title><link>https://patchthecve.com/cve/CVE-2026-1998.html</link><guid>https://patchthecve.com/cve/CVE-2026-1998.html</guid><pubDate>Wed, 17 Jun 2026 10:16:51 +0000</pubDate><description>LOW 3.3: A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mp_import_all of the file py/runtime.c. This manipulation causes memory corruption. The attack needs to be launched locally. The exploit has been published and may be used. Patch name: 570744d06c5ba9dba59b4c3f</description></item><item><title>CVE-2024-8948: A vulnerability was found in MicroPython 1.23.0</title><link>https://patchthecve.com/cve/CVE-2024-8948.html</link><guid>https://patchthecve.com/cve/CVE-2024-8948.html</guid><pubDate>Wed, 17 Jun 2026 08:23:36 +0000</pubDate><description>HIGH 7.3: A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may</description></item><item><title>CVE-2024-8947: A vulnerability was found in MicroPython 1.22.2</title><link>https://patchthecve.com/cve/CVE-2024-8947.html</link><guid>https://patchthecve.com/cve/CVE-2024-8947.html</guid><pubDate>Wed, 17 Jun 2026 08:23:36 +0000</pubDate><description>MEDIUM 5.6: A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be launched remotely. The complexity of an attack is rather high. The expl</description></item><item><title>CVE-2024-8946: A vulnerability was found in MicroPython 1.23.0</title><link>https://patchthecve.com/cve/CVE-2024-8946.html</link><guid>https://patchthecve.com/cve/CVE-2024-8946.html</guid><pubDate>Wed, 17 Jun 2026 08:23:36 +0000</pubDate><description>HIGH 7.3: A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit h</description></item></channel></rss>