BIT-python-min-2026-9669

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/python-min/BIT-python-min-2026-9669.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-python-min-2026-9669

Aliases

Published

2026-06-10T10:16:27.981Z

Modified

2026-06-11T12:15:11.195433998Z

Summary

bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

Details

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.

Database specific

{
    "cpes": [
        "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"
    ],
    "severity": "High"
}

References

Affected packages

Bitnami / python-min

Package

Name: python-min
Purl: pkg:bitnami/python-min

Severity

8.2 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/python-min/BIT-python-min-2026-9669.json"