CVE-2026-42250: Off-by-One Leading to Out-of-Bounds Write in bzip2

Overview

Severity

N/A

Exploit Status

Not Exploited

Patch Tuesday

2026-May

Released

2026-05-29

Last Updated

2026-06-28

EPSS Score

0.13% (percentile: 2.3%)

Affected Products (5)

Open Source Software

• azl3 bzip2 1.0.8-1 on Azure Linux 3.0
• azl3 kata-containers-cc 3.15.0.aks0-9 on Azure Linux 3.0
• azl3 kata-containers-cc 3.15.0.aks0-12 on Azure Linux 3.0
• azl3 bzip2 1.0.8-2 on Azure Linux 3.0
• azl3 kata-containers-cc 3.15.0.aks0-15 on Azure Linux 3.0

Revision History

• 2026-05-29: Information published.
• 2026-05-31: Information published.
• 2026-06-02: Information published.
• 2026-06-03: Information published.
• 2026-06-03: Information published.
• 2026-06-09: Information published.
• 2026-06-23: Information published.
• 2026-06-28: Information published.