CVE-2023-33595

low-risk
Published 2023-06-07

CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.

Do I need to act?

-
0.09% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Python

References (4)

Issue Tracking https://github.com/python/cpython/issues/103824
Patch https://github.com/python/cpython/pull/103993/commits/c120bc2d354ca3d27d0c7a53bf...
Issue Tracking https://github.com/python/cpython/issues/103824
Patch https://github.com/python/cpython/pull/103993/commits/c120bc2d354ca3d27d0c7a53bf...
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal