CVE-2026-1145968.8High
Integer overflow or wraparound in EPICS Base
The EPICS Community · EPICS Base
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
8.8HighCVSS
LowMediumHighCrit.
DescriptionNVD
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.
Coverage1 article · 1 outlet
First in our coverage: SecurityWeek, 28 Oct.
- Cipher uncovers four flaws in EPICS control softwareSecurityWeek · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.