CVE-2010-2089

The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent…

published May 27, 2010

CVSS
—
EPSS
15%
Percentile
96.6
In the wild
Unconfirmed
What it is

The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte string, a different vulnerability than CVE-2010-1634.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14643 · 96.6th percentile
Published
2010-05-27T19:00Z
EPSS history
Timeline
  • 27 MAY 19:00Z
    The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent…
    cvelistv5