A heap buffer overflow exists in the HPE NonStop Inspect Subsystem that can corrupt a resume‑execution address and may redirect program execution flow. The flaw exposes arbitrary code execution potential by allowing an attacker to overwrite critical pointers during memory allocation, a classic instance of the high‑severity buffer overflow vulnerability identified as CWE‑122.

The vulnerability affects Hewlett Packard Enterprise's HPE NonStop Inspect Subsystem. No specific version range is provided, so all installations of the subsystem are likely impacted until an official fix is issued.

The flaw carries a CVSS score of 7.1 and an EPSS score of less than 1%, indicating a moderate severity with a very low probability of exploitation in the wild. It is not listed in the CISA KEV catalog, suggesting no known widespread attacks at the time of this report. The attack vector is not explicitly documented, but the nature of a heap overflow implies that an attacker would need the ability to influence memory writes, likely through a local or remote code execution vector that gains sufficient privileges. Given the low EPSS, the risk of immediate exploitation is considered low, but the impact of a successful attack would be severe.