CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.
{
"cwe_ids": [
"CWE-416"
]
}[
{
"signature_version": "v1",
"id": "PSF-2023-3-54f249cb",
"source": "https://github.com/python/cpython/commit/d5a97074d24cd14cb2a35a2b1ad3074863cde264",
"digest": {
"length": 3735.0,
"function_hash": "246454790113584125124450278536411816426"
},
"deprecated": false,
"target": {
"function": "tok_get_fstring_mode",
"file": "Parser/tokenizer.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "PSF-2023-3-ccff2eec",
"source": "https://github.com/python/cpython/commit/d5a97074d24cd14cb2a35a2b1ad3074863cde264",
"digest": {
"threshold": 0.9,
"line_hashes": [
"51267681898860069028679615138883177799",
"213093290520206118406422764680253202129",
"192193823543881691897098346576838619575",
"240189861850278322221601354770139566320"
]
},
"deprecated": false,
"target": {
"file": "Parser/tokenizer.c"
},
"signature_type": "Line"
}
]