Description
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.
Published: 2026-10-27
Score: 8.8 High
EPSS: n/a
KEV: No
Impact: Denial of Service via out‑of‑bounds memory write
Action: Apply Patch
AI Analysis

Impact

EPICS Base 7.0.10 and earlier contain an integer overflow during message length validation in protocol parsing. This flaw can lead to an out‑of‑bounds memory write. An attacker exploiting the vulnerability can force the EPICS process to crash or become unstable, effectively denying service to clients that rely on the control system.

Affected Systems

The vulnerability affects EPICS Base on versions 7.0.10 and earlier. All installations running EPICS Base prior to version 7.0.11 are exposed. Users should upgrade to 7.0.11, which contains the fix for the integer overflow.

Risk and Exploitability

The CVSS score is 8.8, indicating a high severity exploit. EPSS data are not available, and the vulnerability is not currently listed in CISA's KEV catalog. The flaw can be triggered by malformed protocol messages, which are typically sent over network connections. Therefore, the most likely attack vector is remote, through an application or network interface that accepts EPICS protocol data. Exploitation would require an attacker to successfully send a crafted payload to the EPICS Base process, causing a buffer overrun that destabilizes the service.

Generated by OpenCVE AI on October 27, 2026 at 18:43 UTC.

Remediation

Vendor Solution

The EPICS Community has made available updates to the epics-base GitHub repositories. Affected users should update to the 7.0.11 release. For more information, users should contact the EPICS Controls team https://epics-controls.org/support/. https://github.com/epics-base/epics-base/pull/934 https://github.com/epics-base/epics-base/pull/937 https://github.com/epics-base/pvDataCPP/pull/109

OpenCVE Recommended Actions

  • Upgrade EPICS Base to version 7.0.11 or later, which contains the integer overflow fix.
  • Limit network exposure to EPICS Base endpoints by configuring firewalls or network segmentation to reduce the attack surface.
  • Monitor EPICS Base processes for unexpected restarts or crashes; investigate anomalies and apply security patches as they become available.

Generated by OpenCVE AI on October 27, 2026 at 18:43 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Description In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.
Title Integer overflow or wraparound in EPICS Base
Weaknesses CWE-190
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'}

cvssV4_0

{'score': 8.8, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2026-10-27T16:50:09.514Z

Reserved: 2026-10-21T20:17:33.386Z

Link: CVE-2026-114596

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-27T17:16:58.690

Modified: 2026-10-27T17:16:58.690

Link: CVE-2026-114596

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T18:45:07Z

Weaknesses
  • CWE-190

    Integer Overflow or Wraparound