CVE-2020-10735: A flaw was found in python.

Security readout for executives and security teams

This vulnerability can let very large decimal-style number strings consume excessive CPU when Python converts them to integers. The business impact is availability: services that parse untrusted numeric input could slow down or become unresponsive. The bundle does not show active exploitation or a confirmed CVSS score. Exposure is most likely in Python services that convert attacker-controlled decimal or other non-binary numeric strings using int(). The bundle lists Python 3.7 as affected, while upstream and distribution references suggest broader Python packaging context. Version coverage should be confirmed against vendor advisories. Treat as a targeted availability risk, not a confidentiality or privilege escalation issue based on the supplied evidence. Prioritize internet-facing Python services and APIs that parse large numeric fields from untrusted users. Mitigation focus: Apply relevant Python or distribution updates from vendor advisories.; Review Red Hat, Python, and Fedora guidance for version-specific fixes.; Limit length of untrusted numeric strings before integer conversion..

Prepared

Jun 2, 2026, 02:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.