CVE-2009-4134: Python

Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days.

Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an invalid pointer dereference.

Affected products

• Python Python: version 2.5.0 only

Published 2010-05-27. Last modified 2026-06-16.