CVE-2014-1912

CVE-2014-1912 describes a buffer overflow vulnerability in the socket.recvfrom_into function within Python versions 2.5 through 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1, affecting Python installations on macOS. This flaw allows remote attackers to execute arbitrary code by sending a specially crafted string. With a CVSS score of 7.5, it is considered highly severe, requiring no authentication and having low attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. While not listed in CISA's KEV catalog, a public exploit (EDB-31875) exists, though there is no evidence of active exploitation or significant community discussion.