Python Vulnerability Allows Out-of-Bounds Write on Windows Systems

A high-severity, Windows-only vulnerability (CVE-2026-3298) was disclosed in Python’s asyncio ProactorEventLoop: the sock_recvfrom_into() method fails to validate the incoming data against the supplied nbytes buffer size, enabling out-of-bounds writes that can cause memory corruption, crashes, or potentially arbitrary code execution. The issue affects Windows asyncio network applications using `sock_recvfrom_into(nbytes)`; CPython maintainers published a fix (PR #148809) and users are advised to update immediately.