Type conversion in Python - CVE-2025-12781

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU122976

Type conversion in Python - CVE-2025-12781

Published: February 17, 2026


Vulnerability identifier: #VU122976
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-12781
CWE-ID: CWE-704
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to a type conversion issue in b64decode(), standard_b64decode(), and urlsafe_b64decode() functions when parsing strings with "+" or "/" character. A remote attacker send specially crafted data to the application that can bypass implemented security restrictions.


Affected software

Python
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
Public Cloud Module
Basesystem Module
Python 3 Module
openSUSE Leap
openEuler
python3-help
python3-unversioned-command
python3-tkinter
python3-devel
python3-debugsource
python3-debuginfo
python3-debug
python3
python311-64bit
python311-base-64bit
libpython3_11-1_0-64bit-debuginfo
python311-base-64bit-debuginfo
python311-64bit-debuginfo
libpython3_11-1_0-64bit
python311-base-32bit-debuginfo
python311-base-32bit
python311-32bit
libpython3_11-1_0-32bit-debuginfo
libpython3_11-1_0-32bit
python311-32bit-debuginfo
python311-base-debuginfo
python311-tk
python311-testsuite-debuginfo
python311-devel
python311-doc-devhelp
python311-base
libpython3_11-1_0-debuginfo
python311-testsuite
python311-tools
python311-curses
python311-dbm
libpython3_11-1_0
python311-dbm-debuginfo
python311-debuginfo
python311-tk-debuginfo
python311-curses-debuginfo
python311
python311-doc
python311-core-debugsource
python311-idle
python311-debugsource

How to mitigate CVE-2025-12781

Install updates from vendor's website.

Python - addressed in versions 3.13.12, 3.14.1, 3.15.0a2
python3-help - addressed in versions 3.11.6-20, 3.11.6-23, 3.11.6-24
python3-unversioned-command - addressed in versions 3.11.6-20, 3.11.6-23, 3.11.6-24
python3-tkinter - addressed in versions 3.11.6-20, 3.11.6-23, 3.11.6-24
python3-devel - addressed in versions 3.11.6-20, 3.11.6-23, 3.11.6-24
python3-debugsource - addressed in versions 3.11.6-20, 3.11.6-23, 3.11.6-24
python3-debuginfo - addressed in versions 3.11.6-20, 3.11.6-23, 3.11.6-24
python3-debug - addressed in versions 3.11.6-20, 3.11.6-23, 3.11.6-24
python3 - addressed in versions 3.11.6-20, 3.11.6-23, 3.11.6-24
python311-64bit - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-base-64bit - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
libpython3_11-1_0-64bit-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-base-64bit-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-64bit-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
libpython3_11-1_0-64bit - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-base-32bit-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-base-32bit - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-32bit - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
libpython3_11-1_0-32bit-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
libpython3_11-1_0-32bit - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-32bit-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-base-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-tk - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-testsuite-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-devel - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-doc-devhelp - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-base - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
libpython3_11-1_0-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-testsuite - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-tools - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-curses - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-dbm - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
libpython3_11-1_0 - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-dbm-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-tk-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-curses-debuginfo - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311 - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-doc - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-core-debugsource - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-idle - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1
python311-debugsource - addressed in versions 3.11.14-150400.9.75.1, 3.11.14-150600.3.44.1

External References

Related Security Bulletins