Security research/proof of concept code for analysis of the Python3 interpreter. Prepared for the Layer 1 Security Conference in Los Angeles, California 2023.
The official slides are available here.
Bad bytecode validation leading to injecting the cache for code exec.
Stack and Heap abuse in the ABI for wrapping C code (Numpy, etc)
Tests performed on Pip3 packages and the issue with limited verification.