Erlang

Records81All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high39CVSS 7.0–8.9

Exploited now

Erlang records in CISA KEV

TI-2025-23504 Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2025-06-09

Components

Products in the NVD configurations · select one to filter the records

Erlang/otp 41 records CRITICAL Erlang/ssl 8 records MEDIUM Erlang/ssh 7 records LOW Erlang/inets 4 records MEDIUM Erts 4 records MEDIUM Rebar3 3 records MEDIUM Erlang/public Key 2 records MEDIUM Crypto 1 record MEDIUM

Records

4 records in Erts · all components

TI-2026-36669 CVE-2026-49759

Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash

MEDIUM 45

Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a crafted SCTP ERROR chunk.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00497 Published 2026-06-10 Fixed CWE-121

TI-2026-39663 CVE-2026-54890

BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

LOW 36

Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0042 Published 2026-07-27 Fixed CWE-1284

TI-2026-31012 CVE-2026-42792

epmd permanent DoS via EMFILE on accept(2) in erts

LOW 28

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon (epmd) via connection slot exhaustion.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00435 Published 2026-07-27 Fixed CWE-755

TI-2026-40235 CVE-2026-55737

Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder

LOW 23

Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format (ETF) binary to binary_to_term/1 to corrupt the BEAM he…

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00288 Published 2026-07-27 Fixed CWE-195

Open these records in search →

Critical	6
High	39
Medium	30
Low	6
No CVSS	0