Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py.
Gentoo Linux Security Advisory 201702-14 - A heap-based buffer overflow in PyCrypto might allow remote attackers to execute arbitrary code. Versions less than 2.6.1-r2 are affected.