CVE-2008-4864: Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-d...

Security readout for executives and security teams

This is an old Python memory-corruption issue in the imageop module. In Python 1.5.2 through 2.5.1, crafted large values passed to crop could overflow integer calculations, corrupt memory, escape the Python VM, and execute code. It matters mainly where legacy Python runtimes still process attacker-influenced inputs. Likely exposure is limited to legacy systems running Python 1.5.2 through 2.5.1, or products bundling those runtimes. Apple and VMware advisories indicate downstream vendor impact existed. Modern supported Python versions are outside the described affected range. Prioritize as high only for confirmed legacy Python exposure. The bug can enable arbitrary code execution, but the affected versions are very old and no active exploitation evidence is provided in the bundle. Mitigation focus: Identify and retire Python 1.5.2 through 2.5.1 runtimes.; Apply relevant vendor updates for products bundling vulnerable Python.; Review Python revision 66689 and vendor advisories for fix lineage..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.