---
id: "CVE-2026-48173"
kind: "vulnerability"
aliases: ["CVE-2026-48173"]
title: "NAS message handler: unchecked length field corrupts memory"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "nas", "telecom"]
not_affected_if: []
published_at: "2026-11-05T03:17:27+00:00"
first_seen_at: "2026-11-05T03:31:43+00:00"
updated_at: "2026-11-05T03:33:48+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48173", "first_seen_at": "2026-11-05T03:31:43+00:00"}]
exploit_sources: []
---

# NAS message handler: unchecked length field corrupts memory

The NAS message handler does not properly validate the length field in incoming NAS messages, which causes memory corruption. The sources do not name the affected product or say what an attacker can achieve beyond the corruption itself.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-05T03:31:43+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-48173

## From the sources

In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_