CVE-2023-23931

A vulnerability was found in python-cryptography. In affected versions, Cipher.update_into would accept Python objects which implement the buffer protocol but provide only immutable buffers. This issue allows immutable objects (such as bytes) to be mutated, thus violating the fundamental rules of Python, resulting in corrupted output.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.