The vulnerability is a stack‑based buffer overflow in the ei_s_print_term routine of Erlang OTP’s erl_interface module. It occurs when the routine formats terms into an internal 2000‑character stack buffer. If an encoded Erlang term contains a very large integer whose representation exceeds 2000 characters, the buffer overflows. The overflowing bytes are limited to ASCII digits 0–9 and letters A–F, so exploitation is confined to a denial of service. No direct path to remote code execution is provided, and the flaw is primarily a DoS issue.

The issue occurs in Erlang OTP releases prior to OTP 27.3.4.13, 28.5.0.2, and 29.0.2 – that is, OTP 17.0 through 29.0.1 inclusive. The vulnerable erl_interface releases are those before erl_interface 5.5.2.1, 5.7.0.1, and 5.8.1, which correspond to OTP 27.3.4.13, 28.5.0.2, and 29.0.2 respectively.

The CVSS score of 6.9 indicates a moderate severity, and the vulnerability is not listed in the CISA KEV catalog. The EPSS score is less than 1 %, which suggests a low probability of exploitation. Because the overflowing buffer can be reached only when an attacker controls the encoded integer representation, the likely attack vector is calling ei_s_print_term with untrusted data. The impact is a denial of service rather than remote code execution.