Out-of-bounds read in EPICS Base network message handling
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-843 and the CVSS impact.
Summary
EPICS Base releases through 7.0.10 are affected. Insufficient validation of element or length values in a network message lets the application read beyond the bounds of an allocated buffer (CWE-843). An unauthenticated remote attacker can cause a denial of service and may expose adjacent memory contents.
Written with Claude Haiku 5.5 from the sources below · 2026-11-04
Description from the CNA
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| The EPICS Community | EPICS Base | up to 7.0.10 | — | No fix listed | CNA |
- EPICS Base VendorThe EPICS Community Affected up to 7.0.10 Fixed in — No fix listed CNA
Remediation
The sources list no fixed version for EPICS Base.
Written with Claude Haiku 5.5 from the sources below · 2026-11-04
Timeline
- 2026-10-27 Threatist record created from CVE-2026-114598
- 2026-10-27 Alias added: GHSA-f386-8q3g-8c7r
- 2026-10-28 Priority changed: MEDIUM → LOW
- 2026-11-04 CISA SSVC decision points changed
- 2026-11-04 Priority changed: LOW → MEDIUM
References
More The EPICS Community vulnerabilities
- TI-2026-81435 Integer overflow in EPICS Base request processing corrupts memory CVSS 4.0CRITICAL 9.3
- TI-2026-81436 Integer overflow in EPICS Base leads to out-of-bounds memory write CVSS 4.0HIGH 8.8
- TI-2026-81437 Out-of-bounds read in EPICS Base network message handling CVSS 4.0HIGH 8.7
Sources
- CVE-2026-114598 · CVE Program
- CVE-2026-114598 · NVD
- FIRST EPSS
- GHSA-f386-8q3g-8c7r · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences