CVE-2026-76987: liftoff-sr CIPster Generic Attribute Logic ciptypes.h SetAttrData memory corruption

Published Aug 20, 2026

Updated

A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::SetAttrData of the file ciptypes.h of the component Generic Attribute Logic. Performing a manipulation results in memory corruption. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The patch is named e745d9d4a8ca3a13689066983a1269fe1e567674. It is suggested to install a patch to address this issue.

Affected Software

1 affected component

liftoff-sr CIPster=1802525be27d33e19a9a83c163e331a1d13b1892

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade liftoff-sr CIPster Generic Attribute Logic ciptypes.h to a version that resolves this vulnerability.
Patch e745d9d4a8ca3a13689066983a1269fe1e567674

Event History

Aug 20, 2026

CVE Published

via MITRE·12:15 PM

Data Sourced

via MITRE·12:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue can be initiated remotely, and the vector is network-based with no privileges or user interaction required. Systems exposing the affected CIPster Generic Attribute Logic to reachable attackers are the relevant exposure group.

Is public exploit code available?

Yes. The available information states that an exploit has been released publicly and may be used in attacks.

Which revision is affected and what patch should be applied?

The affected liftoff-sr CIPster revision is 1802525be27d33e19a9a83c163e331a1d13b1892. The identified patch is e745d9d4a8ca3a13689066983a1269fe1e567674.