HPE NonStop TMF Auditread2 is exposed to a stack‑based buffer overflow (CWE‑121) that can corrupt the stack and cause the audit service to crash or become unresponsive, leading to an availability loss without directly affecting confidentiality or integrity. The resulting denial of service can disrupt audit logging, impacting compliance, forensic readiness, and overall system reliability.

The vulnerability impacts Hewlett Packard Enterprise’s HPE NonStop TMF Auditread2 component. No specific version information is provided in the public data, so all releases of this product should be treated as potentially susceptible until the vendor issues a definitive remediation.

The CVSS score of 6.4 signifies moderate severity, focused on availability. An EPSS rating of less than 1% indicates a very low probability of exploitation in the field. The disclosure does not specify an attack vector, so it remains uncertain whether remote or local access is required—attackers may need to interact with the audit service if it is externally reachable or have privileged local access. While the vulnerability is not in CISA’s KEV catalog, the moderate score and potential impact on audit integrity justify a cautious approach.