The vulnerability is an improper restriction of operations within the bounds of a memory buffer in the linkingvision RapidVMS application. This flaw allows an attacker to corrupt memory, potentially leading to arbitrary code execution or denial of service. The weakness is identified as CWE‑119 and is consistent with classic buffer overflow attacks that compromise confidentiality, integrity, or availability of the affected system.

The affected product is linkingvision RapidVMS before the changes incorporated in pull request #96. No specific version numbers are listed in the data, so any deployment running a RapidVMS build generated prior to that pull request is potentially vulnerable.

The CVSS score is 8.8, indicating high severity. EPSS information is not available, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is inferred to be remote, provided the affected component is exposed to an untrusted network, though the data does not explicitly state the vector. The absence of explicit remediation readiness suggests that exploitation could be practical in environments that have not applied the latest patch.