A stack-based buffer overflow flaw in HPE NonStop TMF Auditread2 enables an attacker to trigger a denial of service, disrupting the normal operation of the audit service. The vulnerability results from improper handling of input data and can cause the process to crash or become unresponsive. No disclosure details the precise conditions to trigger the overflow, and it is not clear whether the vulnerability is exploitable via a network request or only through local access.

The vulnerability affects Hewlett Packard Enterprise products, specifically HPE NonStop TMF Auditread2. No affected version numbers are listed in the available data.

The CVSS score of 6.4 rates the issue as moderate severity and the absence of an EPSS score means the likelihood of exploitation is undetermined. The vulnerability is not catalogued as a known exploited vulnerability, and no official solution or workaround has been supplied. The attack vector, if any, is unknown; therefore, the risk is primarily theoretical until a vendor patch is available.