{"id":"PSF-2023-3","details":"CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.","aliases":["BIT-libpython-2023-33595","BIT-python-2023-33595","BIT-python-min-2023-33595","CVE-2023-33595"],"modified":"2026-05-18T23:09:52.079575Z","published":"2023-06-07T00:00:00Z","database_specific":{"cwe_ids":["CWE-416"]},"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/python/cpython","events":[{"introduced":"1ef61cf71a218c71860ff6aecf0fd51edb8b65dc"},{"fixed":"d5a97074d24cd14cb2a35a2b1ad3074863cde264"}]}],"database_specific":{"vanir_signatures_modified":"2026-05-18T23:09:52Z","source":"https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2023-3.json","vanir_signatures":[{"target":{"file":"Parser/tokenizer.c","function":"tok_get_fstring_mode"},"deprecated":false,"source":"https://github.com/python/cpython/commit/d5a97074d24cd14cb2a35a2b1ad3074863cde264","id":"PSF-2023-3-54f249cb","signature_type":"Function","signature_version":"v1","digest":{"function_hash":"246454790113584125124450278536411816426","length":3735}},{"target":{"file":"Parser/tokenizer.c"},"deprecated":false,"source":"https://github.com/python/cpython/commit/d5a97074d24cd14cb2a35a2b1ad3074863cde264","id":"PSF-2023-3-ccff2eec","signature_type":"Line","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["51267681898860069028679615138883177799","213093290520206118406422764680253202129","192193823543881691897098346576838619575","240189861850278322221601354770139566320"]}}]}}],"schema_version":"1.7.5"}