CVE-2026-114596: Integer overflow or wraparound in EPICS Base
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
EPICS Baseto a version that resolves this vulnerability.Fixed in 7.0.11
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
EPICS Base releases 7.0.10 and earlier are affected. The issue occurs while parsing protocol message length values.
Does exploitation require authentication or user interaction?
No. The provided vector indicates network attack access, low attack complexity, no privileges required, and no user interaction.
What is the likely operational impact?
Successful exploitation can produce an out-of-bounds memory write, causing process instability or denial of service. The supplied severity vector indicates high availability impact and low integrity impact, with no confidentiality impact.