UBUNTU-CVE-2026-114597: High severity ubuntu/epics-base vulnerability
Published Nov 3, 2026
·Updated
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.
Affected Software
4 affected components
ubuntu/epics-base*
ubuntu/epics-base*
ubuntu/epics-base*
ubuntu/epics-base*
Event History
Nov 3, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which EPICS Base releases are affected?
EPICS Base release 7.0.10 and prior are affected.
2
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
3
What is the likely impact of successful exploitation?
A malformed network message can cause an out-of-bounds read, resulting in denial of service and possible exposure of adjacent memory contents. The provided CVSS vector identifies availability impact but no confidentiality or integrity impact.