CVE-2023-29824: 
Python vulnerability analysis and mitigation

A use-after-free vulnerability (CVE-2023-29824) was discovered in the Py_FindObjects() function in SciPy versions prior to 1.8.0. This vulnerability is disputed as both the vendor and discoverer indicate that this is not a security issue (NVD, CVE).

The vulnerability stems from a potential use-after-free bug in the Py_FindObjects() function where a reference counter could become negative in case of a memory error. The issue occurs when a second decrement operation is performed on a variable that has already had its reference count reduced to zero, potentially leading to a dangling pointer situation (GitHub Issue).

While initially assigned a CVSS v3.1 base score of 9.8 (Critical) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, the actual impact is disputed by both the vendor and the discoverer who maintain this is not a security issue (NVD).

The issue has been fixed in SciPy version 1.8.0 and later releases. The fix involved removing an extra reference decrement that was not needed and could potentially cause the reference count to become negative in case of a memory error (GitHub PR).