CVE-2014-7185: Apple Mac OS X

Medium severity, CVSS 6.4. EPSS: 5.1% chance of exploitation in the next 30 days.

Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.

Affected products

• Apple Mac OS X: up to and including 10.10.4
• Python Python: up to and including 2.7.7; version 2.7.1 only; version 2.7.2 only; version 2.7.3 only; version 2.7.4 only; version 2.7.5 only; …

Published 2014-10-08. Last modified 2026-06-17.