{"id":"CVE-2026-114595","published":"2026-10-27T17:16:58.530","lastModified":"2026-10-27T17:16:58.530","description":"In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An integer overflow in EPICS Base's network request processing allows attackers to trigger allocation of an undersized memory buffer; subsequent handling of attacker-controlled data can corrupt memory, leading to denial of service or potential remote code execution.","exploitability":"Exploitation is straightforward for remote attackers with network access to the vulnerable EPICS service, requiring only sending a specially crafted request that triggers the integer overflow.","blast_radius":"Successful exploitation could allow an unauthenticated remote attacker to crash the EPICS service (denial of service) or potentially execute arbitrary code on the host system, affecting all services relying on the compromised EPICS instance.","remediation":"Upgrade to EPICS Base version 7.0.11 or later, which contains a fix for the integer overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["integer-overflow","memory-corruption","rce","dos","ics"],"model":"garnet-coder","analyzedAt":"2026-10-28T10:01:10.383Z"}}