Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-37178 EUVD-2026-2051GHSA-2vpx-j6gq-83g2

Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System

Published Jan 13, 2026 · Updated Jan 13, 2026 · Assigned by hpe

Description

Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insufficient validation of maximum buffer size values, the process may attempt to read beyond the intended memory region. Under specific conditions, this can result in a crash of the affected process and a potential denial-of-service of the compromised process.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.12.0.0 – ≤ 8.13.1.0, 8.10.0.0 – ≤ 8.10.0.20 —

Advisories 2

References