A heap out‑of‑bounds write flaw exists in the µD3TN BPv6 administrative record parser. An unauthenticated remote attacker can send a crafted administrative record to the parser, causing a reliable memory corruption that terminates the process or destabilizes the system, resulting in a denial of service. The weakness is a classic out‑of‑bounds write vulnerability (CWE‑787).

This issue targets the µD3TN product from D3TN GmbH, specifically the BPv6 administrative record parser. No version constraints are disclosed, so any installation of the affected component is potentially vulnerable.

The CVSS score of 7.5 indicates high severity. The vulnerability requires no authentication and is reachable over the network, so the remote attack vector is straightforward for an attacker with network access. Although the EPSS score is not available, the lack of authentication and remote reachability suggest a moderate to high likelihood of exploitation. The vulnerability is not listed in CISA KEV, indicating no confirmed large‑scale attacks, but the severity warrants vigilance.