A heap buffer overflow in the HPE NonStop Posix User Threads library can be exploited to execute arbitrary code. The vulnerability arises from improper bounds checking (CWE-122) and would enable an attacker to gain full control of the affected system, compromising confidentiality, integrity, and availability.

The affected product is Hewlett Packard Enterprise's HPE NonStop Posix User Threads. No specific version range is listed, so all current releases of the library are potentially vulnerable until a patch is applied.

The CVSS score of 6.6 indicates moderate severity, and the EPSS score of less than 1% suggests a low exploitation probability at this time. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack likely requires direct interaction with the vulnerable thread library, implying a local or privileged attack vector unless the library is exposed to external inputs. No public exploits are documented as of the data provided.