CVE-2026-21807: HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow
Published Aug 26, 2026
·Updated
HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow.
Affected Software
1 affected component
HCL BigFix Quantum Risk Analyzer
Event History
Aug 26, 2026
CVE Published
via MITRE·10:02 PM
Data Sourced
via MITRE·10:02 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access and effort are required to exploit this issue?
The CVSS vector indicates that exploitation requires local access, high privileges, and high attack complexity. No user interaction is required.
2
What is the expected security impact if exploitation succeeds?
The reported impact is low for confidentiality, integrity, and availability. The CVSS base score is 3.9 (low).