Python bz2 Module Stack Buffer Overflow Vulnerability in BZ2Decompressor

A stack buffer overflow vulnerability has been identified in the Python bz2 module. This issue arises because BZ2Decompressor objects can be reused after a decompression error. If an application catches the resulting OSError and retries with the same decompressor, crafted input may cause the decompressor to resume from an invalid internal state, leading to out-of-bounds writes to a stack buffer. Consequently, this could crash the process when handling untrusted data.

Impact

Exploitation of this vulnerability causes a hard crash of the Python interpreter, potentially with a core dump.

Remediation

Users are advised to update to the latest version of Python, where this vulnerability has been addressed.