In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow…
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- The EPICS Community
- Product
- EPICS Base
- CVSS v3.1
- 8.2 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
- Exploitation
- SSVC none, automatable yes, impact partial
- Weakness
- CWE-190
- NVD status
- Received
Why it ranks 16 (Routine)
- CVSS v3.1 8.2 high
- SSVC: automatable
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-114596 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.