[ CVE-2026-114596 · Published 27 Oct 2026 ]
Vulnerability in The EPICS Community EPICS Base
CVSS 8.2
EPSS <1%No fix listed yet
[ Description ]Official description
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.