CVE-2010-1634

CVE-2010-1634 describes multiple integer overflows in the audioop module of Python versions 2.6, 2.7, 3.1, and 3.2, specifically within audioop.c. This flaw, an incorrect fix for CVE-2008-3143.5, allows unauthenticated attackers to trigger a denial of service (application crash) via a large audio fragment, such as through a call to audioop.lin2lin with a long string, leading to a buffer overflow. The vulnerability has a CVSS score of 5.0 (Medium), indicating a network-based attack with low complexity, requiring no authentication, and resulting in partial availability impact. Its EPSS and FAUCET scores are low, suggesting a minimal likelihood of exploitation in the wild. There is no evidence of active exploitation, and no public exploit code exists in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are also absent, indicating a lack of widespread attention or exploitation.