CVE-2026-9669General

LOWCVSS 8.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Disclosure: 2 classified signals
  • Peaked 3d ago at 1 mentions (2026-06-08); latest day: 1
  • 4 total mentions across 4 days

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-06-08: 1Mentions · 2026-06-11: 1Mentions · 2026-06-18: 1Mentions · 2026-06-20: 1Technical Details · 2026-06-11: 1Technical Details · 2026-06-20: 106-0806-1106-1806-20
Signal classification2 categories
General
250.0%
Disclosure
250.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-06-081
General1
2026-06-111
Disclosure1
2026-06-181
General1
2026-06-201
Disclosure1
Full discourse4 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidad en productos Python ❗ CVE-2026-9669 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-python-2/ https://t.co/hoeFucbSKn

    Post summary

    A brief tweet references CVE-2026-9669 related to Python products but provides no further technical or operational details.

    0000185
    6.7K followersView on X
  • DailyCVE@dailycve
    Disclosure

    🔴 CPython, Stack Buffer Overflow, #CVE-2026-9669 (High) -DC-Jun2026-523 https://dailycve.com/cpython-stack-buffer-overflow-cve-2026-9669-high-dc-jun2026-523/

    Post summary

    The tweet announces a high‑severity stack buffer overflow vulnerability in CPython (CVE‑2026‑9669) and links to a DailyCVE article for further details.

    0000043
    215 followersView on X
  • Open Source Security mailing list@oss_security
    Disclosure

    CVE-2026-9669: CPython: bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow https://www.openwall.com/lists/oss-security/2026/06/08/17 "HIGH severity"

    Post summary

    A high‑severity stack buffer overflow in CPython’s bz2 module (CVE‑2026‑9669) is announced, with a reference to an Openwall security mailing list post.

    00000189
    4.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-9669 [oss-security][CVE-2026-9669] CPython https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-9669 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The post merely cites CVE‑2026‑9669 and provides a link to additional details, offering no technical or operational insights.

    0000055
    4.0K followersView on X

Explore more