The vulnerability is an out‑of‑bounds write that corrupts memory as part of the Cisco Open Source Snort 3 software stack. The corruption could potentially lead to an attacker’s code execution or other destructive outcomes, while the description does not specify the exact consequence beyond the memory fault.

Cisco Cyber Vision, Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense (FTD) Software, and Cisco UTD SNORT IPS Engine Software are affected. Version information is not provided in the advisory, so all current releases of these products are potentially impacted until the hardening fix is applied.

The CVSS score of 9 signals a critical severity, and although the EPSS score is not available, the lack of a CISA KEV listing does not reduce the importance of patching. Attackers who can exploit the out‑of‑bounds write would need to interact with the vulnerable Snort component; the precise method of exploitation is not described, but the high CVSS indicates that once harnessed the vulnerability could be severe.