UBUNTU-CVE-2026-114595: Integer Overflow
Published Nov 3, 2026
·Updated
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.
Affected Software
4 affected components
ubuntu/epics-base*
ubuntu/epics-base*
ubuntu/epics-base*
ubuntu/epics-base*
Event History
Nov 3, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Can this be exploited remotely without authentication or user interaction?
Yes. The CVSS vector indicates network-based exploitation with low attack complexity, no required privileges, and no user interaction.
2
What is the likely security impact if exploitation succeeds?
An attacker may be able to cause memory corruption, denial of service, or potentially remote code execution. The vulnerability is rated critical with high impacts to confidentiality, integrity, and availability.