CVE-2026-1998 | micropython up to 1.27.0 py/runtime.c mp_import_all memory corruption (Issue 18639)

A vulnerability was found in micropython up to 1.27.0. It has been classified as critical. This vulnerability affects the function mp_import_all of the file py/runtime.c. This manipulation causes memory corruption.

This vulnerability is registered as CVE-2026-1998. The attack needs to be launched locally. Furthermore, an exploit is available.

It is suggested to install a patch to address this issue.