8.2Hoch
CVE-2026-114596Integer overflow or wraparound in EPICS Base
Beschreibung
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.
Schwachstellentyp (CWE):
CWE-190
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| The EPICS Community | EPICS Base | ≤ 7.0.10 |
Referenzen und Patches
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01 government-resource