{"id":"CVE-2026-48173","kind":"vulnerability","aliases":["CVE-2026-48173"],"related":[],"title":"NAS message handler: unchecked length field corrupts memory","description":"In the NAS message handler, improper validation of the length field in NAS message causes memory corruption","summary":"The NAS message handler does not properly validate the length field in incoming NAS messages, which causes memory corruption. The sources do not name the affected product or say what an attacker can achieve beyond the corruption itself.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","nas","telecom"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-05T03:17:27+00:00","first_seen_at":"2026-11-05T03:31:43+00:00","triaged_at":"2026-11-05T03:33:48+00:00","updated_at":"2026-11-05T03:33:48+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-11-05T03:33:48Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"NAS message handler: unchecked length field corrupts memory","impact":"high","summary":"The NAS message handler does not properly validate the length field in incoming NAS messages, which causes memory corruption. The sources do not name the affected product or say what an attacker can achieve beyond the corruption itself.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["nas","telecom"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"memory corruption, possibly code execution; unconfirmed","analyst_note":"Identify the affected product and vendor for the NAS message handler (NVD entry linked in sources) and find the fixed version and whether it is remotely reachable.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000595,"input_tokens":4138,"output_tokens":362,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':10A,13A '-48173':11A,14A 'achiev':51B 'affect':43B 'attack':49B 'beyond':52B 'caus':34B,69C 'corrupt':7A,36B,54B,71C 'cve':9A,12A 'field':6A,28B,65C 'handler':3A,21B,59C 'improp':60C 'incom':30B 'infrastructur':15B 'length':5A,27B,64C 'memori':8A,35B,70C 'messag':2A,20B,32B,58C,68C 'name':41B 'nas':1A,16B,19B,31B,57C,67C 'product':44B 'proper':24B 'say':46B 'sourc':38B 'telecom':17B 'uncheck':4A 'valid':25B,61C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","nas","telecom","unknown"],"campaign_type":null,"first_public_at":"2026-11-05T03:17:27+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-48173","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48173","severity":null,"published_at":"2026-11-05T03:17:27+00:00","modified_at":"2026-11-05T03:17:27+00:00","first_seen_at":"2026-11-05T03:31:43+00:00","fetched_at":"2026-11-05T03:31:43+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}