Critical Python Vulnerability Enables Out-of-Bounds Write on Windows Systems

A high-severity out-of-bounds write vulnerability (CVE-2026-3298) was disclosed in Python's asyncio.ProactorEventLoop on Windows: sock_recvfrom_into() fails to enforce bounds for the optional nbytes parameter, allowing incoming network data to overflow buffers and potentially cause crashes, memory corruption, or arbitrary code execution; a CPython patch has been submitted and users are advised to update and avoid the vulnerable API until fixes are widely available.