The vulnerability is a type‑confusion bug triggered by insufficient validation of element or length values in network messages received by EPICS Base. When an attacker sends a crafted message, the application may read data outside the bounds of an allocated buffer, leading to a denial of service and potentially leaking information from adjacent memory. This weakness can impair the availability of systems that rely on EPICS Base to control instrumentation.

The affected product is EPICS Base from The EPICS Community, version 7.0.10 and earlier. Users running the 7.0.10 release or any prior release of EPICS Base on networked control systems are vulnerable. The vulnerability is specific to the EPICS Base component of the EPICS Controls framework.

The CVSS score of 8.7 marks this issue as high severity. The EPSS score is currently unavailable, and the vulnerability is not listed in the CISA KEV catalog. Attackers can exploit the flaw by sending malformed network messages to an EPICS Base service, which is likely to be routable on the network. The vulnerability can be triggered remotely without authentication, and because it corrupts memory, it may further expose sensitive data stored adjacent to the buffer.