Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-9669

Опубликовано: 19 июн. 2026
Источник: msrc
EPSS Низкий

Описание

bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

EPSS

Процентиль: 35%
0.00433
Низкий

Связанные уязвимости

ubuntu
около 2 месяцев назад

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.

CVSS3: 5.9
redhat
около 2 месяцев назад

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.

nvd
около 2 месяцев назад

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.

debian
около 2 месяцев назад

bz2.BZ2Decompressor objects could be reused after a decompression erro ...

github
около 2 месяцев назад

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.

EPSS

Процентиль: 35%
0.00433
Низкий