VDB
GCVE-110-MAGEIA-2023-71
GCVE-110-MAGEIA-2023-71
Advisory Published
Cipher.update_into would accept Python objects which implement the buffer
protocol, but provide only immutable buffers. This would allow immutable
objects (such as 'bytes') to be mutated, thus violating fundamental rules
of Python and resulting in corrupted output. This now correctly raises an
exception. (CVE-2023-23931)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | php | 8.2.10-1.mga9 (unaffected), 0 (affected) | — |
| Mageia | python-cryptography | 0 (affected), 3.3.1-1.2.mga8 (unaffected), 0 (affected), 3.3.1-1.2.mga8 (unaffected) | — |
References
Updated php packages fix bugs
advisory
Browse GCVE Records
72,921 records in the GCVE database · Updated July 15, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.