QwikSec

Security Database

CVE

CWE

Training

CVE-2025-4516

Published: May 15, 2025

Modified: Apr 21, 2026

PUBLISHED

Description

There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError.

Vendor	Product	Versions
Python Software Foundation	CPython	affected `0 - < 3.10.18` affected `3.11.0 - < 3.11.13` affected `3.12.0 - < 3.12.11` affected `3.13.0 - < 3.13.4` affected `3.14.0a1 - < 3.14.0b2`

Weaknesses (CWE)

References

https://github.com/python/cpython/issues/133767

issue-tracking

https://github.com/python/cpython/pull/129648

patch

https://mail.python.org/archives/list/[email protected]/thread/L75IPBBTSCYEF56I2M4KIW353BB3AY74/

vendor-advisory

https://github.com/python/cpython/commit/69b4387f78f413e8c47572a85b3478c47eba8142

patch

https://github.com/python/cpython/commit/9f69a58623bd01349a18ba0c7a9cb1dad6a51e8e

patch

https://github.com/python/cpython/commit/4398b788ffc1f954a2c552da285477d42a571292

patch

https://github.com/python/cpython/commit/6279eb8c076d89d3739a6edb393e43c7929b429d

patch

https://github.com/python/cpython/commit/73b3040f592436385007918887b7e2132aa8431f

patch

https://github.com/python/cpython/commit/8d35fd1b34935221aff23a1ab69a429dd156be77

patch

https://github.com/python/cpython/commit/ab9893c40609935e0d40a6d2a7307ea51aec598b

patch

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.