Live › vulnerability › CVE-2026-114596
Go to dashboardEPICS Base release 7.0.10 and earlier does not validate message length values during protocol parsing, which can cause an integer overflow. The result is an out-of-bounds memory write that can crash the process or cause denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.
Teams running EPICS Base 7.0.10 or earlier in control-system or lab infrastructure where its protocol parsing is reachable. The sources do not say which network-facing services are involved, so exposure depends on whether untrusted network traffic can reach the parser.
No product ranges from the sources yet.
7.0.10; the sources do not name a fixed build beyond that.7.0.10; the sources do not name the exact fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2026-114596")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.