CVE-2026-81575: Missing Sanity Checks for Buffer Lengths
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes the CodeMeter Runtime.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
CodeMeter Runtime deployments configured as a server are affected if they run a version before 8.41a or before 9.10.
What does an attacker need to exploit the vulnerability?
An attacker needs network access to send a request using opcode 0x5e with a crafted data-length value. No privileges or user interaction are required.
What is the likely impact of successful exploitation?
A crafted request can trigger an out-of-bounds read and segmentation fault, crashing the CodeMeter Runtime. The available information describes a denial-of-service impact and does not indicate confidentiality or integrity impact.