CVE-2023-33595

MediumCVSS 5.5

Published: 07/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

29th percentile - higher than 29% of all known CVEs

CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free vulnerability via the function ascii_decode at /Objects/unicodeobject.c.

This vulnerability may lead to unpredictable application behavior, potentially resulting in data leakage or remote code execution.

It is recommended to upgrade to the latest stable version of CPython to mitigate this vulnerability.

Original NVD description (English source)

CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.