CVE-2025-4516
EUVD-2025-1515615.05.2025, 14:15
There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError.EnginsightEarly Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| python | cpython | 𝑥 < 3.9.23 | CNA |
| python | cpython | 3.10.0 ≤ 𝑥 < 3.10.18 | CNA |
| python | cpython | 3.11.0 ≤ 𝑥 < 3.11.13 | CNA |
| python | cpython | 3.12.0 ≤ 𝑥 < 3.12.11 | CNA |
| python | cpython | 3.13.0 ≤ 𝑥 < 3.13.4 | CNA |
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| python2.7 |
| ||||||||||||||||||
| python3.10 |
| ||||||||||||||||||
| python3.11 |
| ||||||||||||||||||
| python3.12 |
| ||||||||||||||||||
| python3.13 |
| ||||||||||||||||||
| python3.14 |
| ||||||||||||||||||
| python3.4 |
| ||||||||||||||||||
| python3.5 |
| ||||||||||||||||||
| python3.6 |
| ||||||||||||||||||
| python3.7 |
| ||||||||||||||||||
| python3.8 |
| ||||||||||||||||||
| python3.9 |
|
Common Weakness Enumeration
References