Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2026-9669

Summary
Assigner-PSF
Assigner Org ID-28c92f92-d60d-412d-b760-e73465c3df22
Published At-08 Jun, 2026 | 22:01
Updated At-07 Jul, 2026 | 16:59
Rejected At-
Credits

bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:PSF
Assigner Org ID:28c92f92-d60d-412d-b760-e73465c3df22
Published At:08 Jun, 2026 | 22:01
Updated At:07 Jul, 2026 | 16:59
Rejected At:
▼CVE Numbering Authority (CNA)
bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.

Affected Products
Vendor
Python Software FoundationPython Software Foundation
Product
CPython
Repo
https://github.com/python/cpython
Modules
  • bz2
Default Status
unaffected
Versions
Affected
  • From 0 before 3.13.14 (python)
  • From 3.14.0 before 3.14.6 (python)
  • From 3.15.0a1 before 3.15.0b3 (python)
Problem Types
TypeCWE IDDescription
CWECWE-121CWE-121 Stack-based buffer overflow
Type: CWE
CWE ID: CWE-121
Description: CWE-121 Stack-based buffer overflow
Metrics
VersionBase scoreBase severityVector
4.08.2HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Version: 4.0
Base score: 8.2
Base severity: HIGH
Vector:
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

reporter
Bitshift (https://github.com/TheShiftedBit)
coordinator
Emma Smith (https://github.com/emmatyping)
remediation developer
Stan Ulbrych (https://github.com/StanFromIreland)
remediation reviewer
Serhiy Storchaka (https://github.com/serhiy-storchaka)
Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://github.com/python/cpython/pull/150600
patch
https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/
vendor-advisory
https://github.com/python/cpython/issues/150599
issue-tracking
https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6
patch
https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036e
patch
https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6f
patch
https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702d
patch
https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79
patch
Hyperlink: https://github.com/python/cpython/pull/150600
Resource:
patch
Hyperlink: https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/
Resource:
vendor-advisory
Hyperlink: https://github.com/python/cpython/issues/150599
Resource:
issue-tracking
Hyperlink: https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6
Resource:
patch
Hyperlink: https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036e
Resource:
patch
Hyperlink: https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6f
Resource:
patch
Hyperlink: https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702d
Resource:
patch
Hyperlink: https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79
Resource:
patch
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
http://www.openwall.com/lists/oss-security/2026/06/08/17
N/A
Hyperlink: http://www.openwall.com/lists/oss-security/2026/06/08/17
Resource: N/A
2. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:cna@python.org
Published At:08 Jun, 2026 | 23:17
Updated At:23 Jul, 2026 | 08:10

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.08.2HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
N/A
Type: Secondary
Version: 4.0
Base score: 8.2
Base severity: HIGH
Vector:
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Type: N/A
Version:
Base score:
Base severity: N/A
Vector:
CPE Matches

Weaknesses
CWE IDTypeSource
CWE-121Secondarycna@python.org
CWE ID: CWE-121
Type: Secondary
Source: cna@python.org
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6cna@python.org
N/A
https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036ecna@python.org
N/A
https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6fcna@python.org
N/A
https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79cna@python.org
N/A
https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702dcna@python.org
N/A
https://github.com/python/cpython/issues/150599cna@python.org
N/A
https://github.com/python/cpython/pull/150600cna@python.org
N/A
https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/cna@python.org
N/A
http://www.openwall.com/lists/oss-security/2026/06/08/17af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6
Source: cna@python.org
Resource: N/A
Hyperlink: https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036e
Source: cna@python.org
Resource: N/A
Hyperlink: https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6f
Source: cna@python.org
Resource: N/A
Hyperlink: https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79
Source: cna@python.org
Resource: N/A
Hyperlink: https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702d
Source: cna@python.org
Resource: N/A
Hyperlink: https://github.com/python/cpython/issues/150599
Source: cna@python.org
Resource: N/A
Hyperlink: https://github.com/python/cpython/pull/150600
Source: cna@python.org
Resource: N/A
Hyperlink: https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/
Source: cna@python.org
Resource: N/A
Hyperlink: http://www.openwall.com/lists/oss-security/2026/06/08/17
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

1Records found

CVE-2026-5713
Matching Score-6
Assigner-Python Software Foundation
ShareView Details
Matching Score-6
Assigner-Python Software Foundation
CVSS Score-5.3||MEDIUM
EPSS-0.13% / 3.19%
||
7 Day CHG~0.00%
Published-14 Apr, 2026 | 15:11
Updated-10 Jun, 2026 | 19:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target

The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "python -m asyncio ps" and "python -m asyncio pstree") features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via the remote debugging feature. This vulnerability requires persistently and repeatedly connecting to the process to be exploited, even after the connecting process crashes with high likelihood due to ASLR.

Action-Not Available
Vendor-Python Software Foundation
Product-CPython
CWE ID-CWE-121
Stack-based Buffer Overflow
CWE ID-CWE-125
Out-of-bounds Read
Details not found