An out‐of‑bounds write in the ix‑ray_engine 1.6 component allows arbitrary memory corruption and can enable an attacker to execute code or crash the system, therefore compromising confidentiality, integrity and availability.

The vulnerability impacts ixray‑team’s ix‑ray_engine 1.6 (ixray‑1.6‑stcop). All releases before version 1.3 are affected; the 1.3 release contains the remediation.

The CVSS score of 9.8 denotes a severe risk. The EPSS rating is below 1 %, indicating a low probability of exploitation in the wild. It is not listed in the CISA KEV catalog. Detailed attack vectors are not provided in the source data, but the nature of the flaw suggests a remote attacker could trigger the out‑of‑bounds write by sending crafted input to the affected module, though no public exploit has been reported.