CVE-2026-114597High· 7.5▾ TwilightIn EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 28.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.
epics_base <= 7.0.10The EPICS Community has made available updates to the epics-base GitHub repositories. Affected users should update to the 7.0.11 release. For more information, users should contact the EPICS Controls team https://epics-controls.org/support/.
https://github.com/epics-base/epics-base/pull/934 https://github.com/epics-base/epics-base/pull/937 https://github.com/epics-base/pvDataCPP/pull/109
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114596High· 8.2Integer overflow or wraparound in EPICS Base
CVE-2026-114595Critical· 9.8Integer overflow or wraparound in EPICS Base
CVE-2026-114598High· 7.5Access of resource using incompatible type ('type confusion') in EPICS Base
CVE-2026-5367High· 8.6A flaw was found in OVN (Open Virtual Network)
CVE-2026-116531NoneHTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk
CVE-2026-116013Low· 3.7OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing