An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability—CWE-119—exists in linkingvision rapidvms. The vulnerability allows data to be written beyond the intended memory buffer, but the official description does not elaborate on the exact operational consequences.

RapidVMS installations that were in use before the code changes introduced in pull request #96 are considered vulnerable. No specific version numbers are provided, so any release prior to that pull request should be treated as affected.

The CVSS base score of 7.8 classifies this defect as high severity. Exploit probability information is not available and the issue has not been listed in the Known Exploited Vulnerabilities catalog, so the risk of exploitation remains uncertain. The description does not specify the attack vector, therefore the accessibility and conditions required for exploitation cannot be determined from the available data.