The vulnerability arises from improper control of a resource throughout its lifetime, categorized as CWE‑664. Splunk Enterprise components may allocate or free resources such as memory, file handles, or network sockets without sufficient safeguards, enabling an attacker or erroneous process to influence their usage. The vendor’s description does not outline specific outcomes beyond the lack of control, and no exploitation evidence beyond the release of a hardening update is provided.

All releases of Splunk Enterprise older than 10.4.4, 10.2.8, 10.0.11, and 9.4.16 are affected. The vendor recommends upgrading to any of these listed versions or a later release to address the flaw.

The CVSS score of 8.8 indicates a high severity vulnerability, yet the EPSS score of less than 1% suggests a low likelihood of exploitation. The flaw is not listed in the CISA KEV catalog, and no public exploits have been reported. Attack vectors are not explicitly disclosed; it is inferred that exploitation would require the attacker to influence the allocation or deallocation of resources via any interface that permits such control.