A heap-based buffer overflow exists in JP1/Automatic Job Management System 3 that can corrupt memory and grant an attacker arbitrary code execution. The flaw is tied to improper handling of heap allocations and is classified as CWE-122. If exploited, an attacker could compromise the entire system’s confidentiality, integrity, and availability, potentially gaining full control over the affected machine.

The vulnerability affects the Hitachi JP1/Automatic Job Management System 3 Manager and Agent components. Versions from 11-00 up to, but not including, 13-50-31 are impacted. Users running any of these builds should verify if their installation falls into this version range and take remediation steps.

The vulnerability carries a CVSS score of 9.8, indicating very high risk. No EPSS score was published, but the lack of a KEV listing does not diminish the severity implied by the CVSS metric. Based on the description, it is inferred that the attack vector may involve network traffic received by the Manager or Agent, as the overflow is triggered by malformed input processed during normal operation. Given the high severity and potential for remote exploitation in services exposed to untrusted users, the risk is significant.