CVE-2026-9669
Vulnerability Description
bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-121
Source
NVD
Discussion (0)
Add Comment
No comments yet. Be the first!