CVE-2026-114595EUVD-2026-111108
Integer overflow or wraparound in EPICS Base
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
EPICS Base, the widely used software toolkit for building control systems, is affected by this flaw. An attacker sending crafted network requests could corrupt memory, crash the software, or potentially run malicious code remotely.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.
Affected versions
- The EPICS Community EPICS Base
through 7.0.10