A heap buffer overflow in HPE NonStop OCAX can corrupt the process address space and may redirect execution flow, which can lead to arbitrary code execution. This memory corruption occurs when the application writes beyond the bounds of a heap buffer, allowing an attacker to influence program logic and potentially gain control of the system.

Hewlett Packard Enterprise HPE NonStop OCAX is affected. No specific version information is provided in the advisory, so all releases of the OCAX product should be considered potentially vulnerable until patch information becomes available.

The CVSS score of 7.1 indicates a high severity, while the EPSS score of less than 1% suggests a low probability of exploitation at present. The vulnerability is not in the CISA KEV catalog. The likely attack vector is any component that allocates heap memory for user-supplied data; based on the description it is inferred that an attacker could exploit the overflow remotely or locally if such interfaces are exposed. Proper error handling and bounds checking are lacking, as indicated by CWE-122.