CVE-2026-114595criticalCWE-190

CVE-2026-114595: critical vulnerability in The EPICS Community EPICS Base

Integer overflow or wraparound in EPICS Base

Published · Updated

Follow this CVE+ Monitor EPICS Base

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.3epss 0.5%
from disclosure to weapon1 day
Published on NVDOct 27
1st PoC+1d
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
The EPICS Community · EPICS Base
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — The EPICS Community EPICS Base

In the same product, most dangerous first.

CVE-2026-114598HIGHAccess of resource using incompatible type ('type confusion') in EPICS BaseEPSS 0.3%CVE-2026-114597HIGHImproper handling of length parameter inconsistency in EPICS BaseEPSS 0.3%CVE-2026-114596HIGHInteger overflow or wraparound in EPICS BaseEPSS 0.3%