Python 3.x through to 3.9.1 has a buffer overflow in PyCArg_repr in ctypes/callproc.c, which may lead to remote code execution.

A buffer overflow occurs when a threat actor can access or write data outside a program's allocated memory space, CISA explained.