The vulnerability is a heap-based buffer overflow in the sdxd service‑deployment daemon. An attacker who can control or intercept the traffic to the configured SDX/SRC server can send a crafted frame over the service‑deployment TCP connection. If the overflow is triggered, the attacker can execute arbitrary code as root, or alternatively cause a denial of service by crashing the daemon. The weakness results in complete compromise of the affected system. This flaw is identified as CWE-122: Heap-based Buffer Overflow.

Juniper Networks Junos OS and Junos OS Evolved are affected. The following releases contain the fix: Junos OS 23.2R2‑S7.7, 23.4R2‑S8.13, 24.2R2‑S5.5, 24.4R2‑S5, 25.2R2‑S2, 25.4R1‑S3, 25.4R2, 26.2R1‑S2, 26.2R2, 26.4R1 and all subsequent releases; Junos OS Evolved 23.2R2‑S7.7‑EVO, 23.4R2‑S8.11‑EVO, 24.2R2‑S5.6‑EVO, 24.4R2‑S5‑EVO, 25.2R2‑S2‑EVO, 25.2X100‑D35‑EVO, 25.4R1‑S3‑EVO, 25.4R2‑EVO, 25.4X300‑D40‑EVO, 26.2R1‑S2‑EVO, 26.2R2‑EVO, 26.4R1‑EVO and all subsequent releases. Earlier releases of these versions have been rebuilt to address the issue.

The CVSS score is 9.3, indicating a high severity with potential for remote compromise. A direct exploit requires the attacker to influence traffic to the SDX/SRC service, which is likely achievable over the network from an unauthenticated remote host. EPSS is less than 1% (approximately 0.7%), indicating a very low exploitation probability. The vulnerability is not listed in CISA KEV, but the high CVSS score and the nature of the flaw warrant immediate attention. The attack vector is inferred to be the remote service‑deployment TCP connection, where an attacker who can intercept or feed malformed frames may trigger the overflow. No workarounds exist.