UBUNTU-CVE-2026-114598: High severity ubuntu/epics-base vulnerability
Published Nov 3, 2026
·Updated
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.
Affected Software
4 affected components
ubuntu/epics-base*
ubuntu/epics-base*
ubuntu/epics-base*
ubuntu/epics-base*
Event History
Nov 3, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Who is exposed to this issue?
Systems running EPICS Base 7.0.10 or earlier are affected. Because the issue is triggered through a network message and requires no privileges or user interaction, reachable EPICS Base deployments are the relevant exposure.
2
What can an unauthenticated attacker do?
An attacker can send a network message with insufficiently validated element or length values, causing an out-of-bounds read. The stated impacts are denial of service and possible disclosure of adjacent memory contents.