UBUNTU-CVE-2026-114596: Integer Overflow
Published Nov 3, 2026
·Updated
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.
Affected Software
4 affected components
ubuntu/epics-base*
ubuntu/epics-base*
ubuntu/epics-base*
ubuntu/epics-base*
Event History
Nov 3, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker can exploit it over the network without authentication or user interaction, as reflected by the AV:N, PR:N, and UI:N vector components.
2
What is the likely operational impact?
Successful exploitation can cause EPICS Base process instability or denial of service. The provided impact vector indicates high availability impact and low integrity impact, with no confidentiality impact.
3
Which releases are known to be affected?
EPICS Base 7.0.10 and prior are identified as affected in the available information.