A vulnerability in the HPE NonStop HTTP WEBSERVER component allows the creation of a memory corruption scenario. This flaw can cause a system halt, functioning as a denial‑of‑service for the affected server. The weakness is an instance of improper input validation, classified as CWE‑20.

The affected product is Hewlett Packard Enterprise’s HPE NonStop HTTP WEBSERVER. No specific version numbers are listed in the advisory, so users should consult the vendor reference to ascertain which releases contain the fix.

The CVSS score of 8.2 indicates a high severity to the integrity and availability of the system. The EPSS score of less than 1% suggests a low probability that attackers are exploiting this flaw in the wild, and it is not currently listed in CISA’s KEV registry. The flaw can be leveraged from a remote attacker that can send crafted HTTP requests to the web server, but this attack vector is inferred from the product’s exposed network interface and the nature of the memory corruption.