What’s Vulnerable › Vulnerabilities

CVE-2023-33595

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-07 · updated 2026-06-17
• Weakness: CWE-416

Description

CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.

Affected products

• Python: 3.12.0-alpha7

References

• https://github.com/python/cpython/issues/103824
• https://github.com/python/cpython/pull/103993/commits/c120bc2d354ca3d27d0c7a53bf65574ddaabaf3a
• https://github.com/python/cpython/issues/103824
• https://github.com/python/cpython/pull/103993/commits/c120bc2d354ca3d27d0c7a53bf65574ddaabaf3a

Get alerted when CVE-2023-33595 or the next vulnerability affects your stack