EIP-2026-116112

This is a detailed technical analysis of CVE-2026-158766, an out-of-bounds read vulnerability in Python 3.3-3.5's `product_setstate()` function. It includes root cause analysis, code snippets, and a proof-of-concept script demonstrating the issue.