The vulnerability is a memory corruption flaw in HPE NonStop TSQLEXE that can be triggered by a specially crafted SQL query. When the database processes the malformed query, corrupted memory leads to an application crash, causing a denial of service. It is classified as CWE‑564, reflecting uncontrolled input size that can corrupt memory.

The affected vendor/product is Hewlett Packard Enterprise: HPE NonStop TSQLEXE. No specific version information is provided in the advisory, so any deployment of this product may be affected until a vendor patch is applied.

The CVSS score of 4.4 indicates a moderate severity. The EPSS score is 0.00134 (<1%) and the vulnerability is not listed in the CISA KEV catalog, suggesting a lower likelihood of widespread exploitation at present. However, the attack vector is inferred to be remote, based on the requirement that an attacker inject a crafted SQL query. The lack of an official patch or workaround means the risk persists until remediation steps are taken.