This vulnerability is an out‑of‑bounds write in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. A remote, unauthenticated attacker can send Auto‑RP mapping announcements that trigger the flaw, leading to a routing‑plane crash and a denial of service. The weakness corresponds to CWE‑787 and impacts the confidentiality of routing information is not directly exposed, but the availability of the entire routing plane is compromised.

Juniper Networks Junos OS and Junos OS Evolved are affected. Vulnerable releases include Junos OS 23.2R2‑S7.7, 23.4R2‑S8.13, 24.2R2‑S5.5, 24.4R2‑S5, 25.2R2‑S2, 25.4R1‑S3, 25.4R2, 26.2R1‑S2, 26.2R2, 26.4R1 and all later releases; Junos OS Evolved 23.2R2‑S7.7‑EVO, 23.4R2‑S8.11‑EVO, 24.2R2‑S5.6‑EVO, 24.4R2‑S5‑EVO, 25.2R2‑S2‑EVO, 25.2X100‑D35‑EVO, 25.4R1‑S3‑EVO, 25.4R2‑EVO, 25.4X300‑D40‑EVO, 26.2R1‑S2‑EVO, 26.2R2‑EVO, 26.4R1‑EVO and all later releases.

The CVSS score of 7.1 places the issue in the High category. No EPSS data is available, and the vulnerability is not listed in the CISA KEV catalog, indicating no known exploits at this time. The likely attack vector is an unauthenticated adversary who can inject Auto‑RP mapping announcements targeted at a device with the feature enabled. The resulting crash disables the routing plane, causing a service outage until the process is restarted.