A remote attacker who can send a specially crafted network packet can trigger an out‑of‑bounds memory read in the Sick Safetyscanners Base CPP Driver. The read is caused by insufficient validation of packet length, which may lead the application to crash. The resulting crash produces a denial‑of‑service condition that would interrupt the driver’s operation on the affected system.

The vulnerability affects the SICK AG Sick Safetyscanners Base CPP Driver. No specific legacy version is enumerated, but the vendor recommends upgrading to version 1.0.5, which contains the fix.

The CVSS score of 7.5 indicates high severity, while the EPSS score of less than 1% suggests that exploitation is currently unlikely but possible. The vulnerability is not listed in the CISA KEV catalog. The attack requires remote network access, and a malicious packet can be sent from anywhere that the driver accepts traffic. An exploit would simply cause the application to crash, giving the attacker a simple denial‑of‑service.