diff --git a/CHANGES.rst b/CHANGES.rst
index 3d6ff115360831b422b0b0b0df1fcfa4caf7a625_Q0hBTkdFUy5yc3Q=..18f2e61416dc317d8c6ad11e22092010f598d048_Q0hBTkdFUy5yc3Q= 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -20,6 +20,9 @@
 * Creating an empty unicode slice with large bounds could crash.
   Patch by Sam Sneddon.  (Github issue #3531)
 
+* Decoding an empty bytes/char* slice with large bounds could crash.
+  Patch by Sam Sneddon.  (Github issue #3534)
+
 * Creating a fused function attached it to the garbage collector before it
   was fully initialised, thus risking crashes in rare failure cases.
   Original patch by achernomorov.  (Github issue #3215)