CVEs-PoC/2025/CVE-2025-4516.md

CVE-2025-4516

Description

There is an issue in CPython when using bytes.decode("unicode_escape", error="ignore|replace"). If you are not using the "unicode_escape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError.

POC

Reference

No PoCs from references.

Github

• https://github.com/CKA-codespace/cg-compare
• https://github.com/GitHubForSnap/matrix-commander-gael
• https://github.com/adegoodyer/kubernetes-admin-toolkit