BIT-python-min-2025-4516: Use-after-free in "unicode_escape" decoder with error handler
Published May 15, 2025
·Updated
There is an issue in CPython when using bytes.decode("unicodeescape", error="ignore|replace"). If you are not using the "unicodeescape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError.
Affected Software
1 affected component
Python Software Foundation CPython
Event History
May 15, 2025
CVE Published
via OSV·01:29 PM
Data Sourced
via OSV·01:29 PM
DescriptionSeverityWeakness