PT-2025-21282
CVE-2025-4516
·
Published
2025-05-15
·
Updated
2026-09-18
Description by
CVSS 4.0
5.9
MediumMetricsAV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
CPython (affected versions not specified)
Description:
The issue arises when using
bytes.decode() with the "unicode escape" encoding and an error handler set to "ignore" or "replace". Users not utilizing this specific encoding or error handler are not affected.Recommendations:
To work around this issue, consider stopping the use of the error handler in the
bytes.decode() call and instead wrap it in a try-except block to catch the DecodeError.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾