A stack and heap buffer overflow vulnerability exists in HPE NonStop Hpjmeter. The flaw can corrupt memory locations when a user supplies an excessively long input, potentially leading to program instability or denial of service. While the current description does not specify remote code execution, buffer overflows of this type can be leveraged by an attacker to manipulate the program’s control flow, which may allow arbitrary code execution if additional logic is present.

The affected system is Hewlett Packard Enterprise HPE NonStop Hpjmeter. Specific version information is not provided in the data, so it is uncertain which releases contain the flaw.

The CVSS score for this issue is 2, indicating a low overall impact. The EPSS score is less than 1%, suggesting that it is unlikely to be actively exploited. The vulnerability is not listed in CISA’s Known Exploited Vulnerabilities catalog, further indicating low exploitation likelihood. Because the description does not detail an attack vector, it is inferred that the flaw requires local or privileged access to supply the offending input, although remote exploitation cannot be ruled out entirely.