Skip to content
OpenAdvisories
Critical ICSA-26-300-01 4 CVEs

EPICS Base

Published Oct 27, 2026 · Updated Oct 27, 2026

Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code.

Vulnerabilities 4

  • Critical 9.8
    CVE-2026-114595 Public exploit

    Integer overflow or wraparound in EPICS Base

    In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential r…

  • High 8.2

    Integer overflow or wraparound in EPICS Base

    In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of ser…

  • High 7.5

    Improper handling of length parameter inconsistency in EPICS Base

    In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory…

  • High 7.5

    Access of resource using incompatible type ('type confusion') in EPICS Base

    In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory…

Revision history

  1. #1

    Initial Publication

References