In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size.
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- The EPICS Community
- Product
- EPICS Base
- CVSS v3.1
- 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.005 (p43)
- Exploitation
- SSVC none, automatable yes, impact total
- Weakness
- CWE-190
- NVD status
- Received
Why it ranks 39 (Notable)
- CVSS v3.1 9.8 critical
- SSVC: automatable
- SSVC: total technical impact
- Covered by 3 independent sources
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-114595 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.