CVE-2026-1145959.8Critical
Integer overflow or wraparound in EPICS Base
The EPICS Community · EPICS Base
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
9.8CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.
Coverage1 article · 1 outlet
First in our coverage: SecurityWeek, 28 Oct.
- Cipher uncovers four flaws in EPICS control softwareSecurityWeek · first in our coverage
New articles also arrive in the RSS feed.