9.8Kritisch
CVE-2026-114595Integer overflow or wraparound in EPICS Base
Beschreibung
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.
Schwachstellentyp (CWE):
CWE-190
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| The EPICS Community | EPICS Base | ≤ 7.0.10 |
Referenzen und Patches
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01 government-resource