A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor can allow an attacker to read memory contents beyond the intended bounds or cause the executor process to terminate unexpectedly. The flaw arises from insufficient bounds checking in the code that processes incoming SQL commands, representing a classic stack-based buffer overrun (CWE‑121). When triggered, an attacker could obtain sensitive database information or disrupt service availability by crashing the executor component.

The affected product is Hewlett Packard Enterprise HPE NonStop SQL/MX Executor. No specific version range is supplied, so all instances of the executor running in the last analysis window should be evaluated and considered potentially vulnerable.

The CVSS score of 7.6 indicates high severity, while the EPSS score of less than 1% indicates a very low likelihood of exploitation observed in the wild. It is not listed in the CISA KEV catalog, which suggests no known widespread exploitation. Inferred from the description, an attacker would likely need to craft a specially malformed SQL query or send malformed data to the executor service, implying that the attack vector is remote through the database service interface. Given the low EPSS, the risk is moderate, but the potential impact warrants patching promptly.