The vulnerability allows the remote debugging feature in CPython to perform out‑of‑bounds memory operations that can read or write addresses in a privileged process. This flaw combines buffer overflow style misuse of memory pointers (CWE‑121) with unchecked bounds checking (CWE‑125). If achieved, an attacker could manipulate the target process’s memory, potentially leading to arbitrary code execution or other security breaches.

Any Python installation using CPython’s built‑in remote debugging capability is affected. No specific version ranges are listed, so the issue applies to all releases that support this feature until a patch is applied.

The CVSS score of 5.3 indicates a moderate severity. Exploitation requires the attacker to establish a persistent, repeated connection to the target process and may repeatedly crash the connecting process due to ASLR. The lack of an EPSS score and absence from the KEV catalog suggest that widespread exploitation is currently unlikely, but the potential for privilege escalation remains significant if the conditions are met.