The vulnerability is a heap buffer overflow that can corrupt a resume‑execution address in HPE NonStop Debug Utilities, potentially allowing an attacker to redirect the execution flow of the system. This flaw could lead to arbitrary code execution on the target system if successfully triggered, compromising both confidentiality and integrity of the affected environment.

Hewlett Packard Enterprise HPE NonStop Debug Utilities are affected. No specific version range is provided in the CNA data; any installation of the debug utilities product may be vulnerable until a fixed release is applied.

The CVSS score of 7.1 indicates high severity, while the EPSS score of < 1% shows a very low current exploitation probability. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is inferred to be local or remote access to the debug utilities, as the exploitable buffer resides on the heap of a process that requires such access. If an attacker gains sufficient privileges to interact with the utilities, the overflow could enable code execution on the host.