An out‑of‑bounds memory read vulnerability has been identified in HPE NonStop EXPAND. The flaw allows a process to read memory beyond the bounds of a buffer, which may expose confidential data stored outside the intended memory region. This weakness is classified as CWE‑125, which indicates improper bounds checking during a read operation.

The vulnerability affects Hewlett Packard Enterprise’s HPE NonStop EXPAND. The available data does not list specific affected versions, so all installations of this product could be at risk until a vendor update is applied. The lack of version detail means a conservative approach of treating all current deployments as vulnerable is warranted.

The CVSS score of 5.7 assigns it moderate severity. The EPSS score is unavailable, so the current exploitation likelihood cannot be quantified. It is not listed in the CISA KEV catalog, indicating no widespread exploitation has been observed. The attack vector is not explicitly stated in the CVE description, and the exploitation conditions are not described; as a result, the specifics of how an attacker might trigger the out‑of‑bounds read remain unknown based solely on the provided information.