A heap buffer overflow in HPE NonStop NDSREST corrupts the resume‑execution address, potentially redirecting execution flow. The flaw is a classic memory corruption vulnerability that, if exploited, could allow an attacker to execute arbitrary code or cause a denial of service. The likely attack vector involves specially crafted input sent to the NDSREST service, which may be reachable over the network.

Hewlett Packard Enterprise HPE NonStop NDSREST is affected. No specific version information is provided.

The CVSS score of 7.1 indicates high severity, while the EPSS score of less than 1 % suggests a low probability of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. Exploitation would require presentation of malformed data to the NDSREST service, and could be attempted by an unauthenticated attacker with network access.