Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.
2.7.12-1ubuntu0~16.04.183.5.2-2ubuntu0~16.04.132.7.17-1~18.04ubuntu1.63.6.9-1~18.04ubuntu1.43.7.5-2~18.04.43.8.0-3~18.04.12.7.18-1~20.04.13.8.5-1~20.04.23.9.5-3~20.04.12.7.6-8ubuntu0.6+esm10Exploitability
AV:NAC:LPR:NUI:NScope
S:UImpact
C:HI:HA:HCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H