CVE-2026-114595

Summary

An integer overflow in EPICS Base's network request processing allows attackers to trigger allocation of an undersized memory buffer; subsequent handling of attacker-controlled data can corrupt memory, leading to denial of service or potential remote code execution.

Exploitability

Exploitation is straightforward for remote attackers with network access to the vulnerable EPICS service, requiring only sending a specially crafted request that triggers the integer overflow.

Blast radius

Successful exploitation could allow an unauthenticated remote attacker to crash the EPICS service (denial of service) or potentially execute arbitrary code on the host system, affecting all services relying on the compromised EPICS instance.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to EPICS Base version 7.0.11 or later, which contains a fix for the integer overflow vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.