7.5Hoch
CVE-2026-114598Access of resource using incompatible type ('type confusion') in EPICS Base
Beschreibung
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.
Schwachstellentyp (CWE):
CWE-843
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| The EPICS Community | EPICS Base | ≤ 7.0.10 |
Referenzen und Patches
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01 government-resource