CVE-2026-1145988.7High
Access of resource using incompatible type ('type confusion') in EPICS Base
The EPICS Community · EPICS Base
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
8.7HighCVSS
LowMediumHighCrit.
DescriptionNVD
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.
Coverage1 article · 1 outlet
First in our coverage: SecurityWeek, 28 Oct.
- Cipher uncovers four flaws in EPICS control softwareSecurityWeek · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.