1. Home
  2. CVE Database
  3. CVE-2026-114596
HIGH · 8.2

CVE-2026-114596

In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful ...

Vulnerability Description

In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.

CVSS Score

8.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
HIGH

Related Weaknesses (CWE)

CWE-190

References

FAQ

What is CVE-2026-114596?

CVE-2026-114596 is a vulnerability with a CVSS score of 8.2 (HIGH). In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful ...

How severe is CVE-2026-114596?

CVE-2026-114596 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-114596?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.