A buffer overflow in HPE NonStop ODBC/MX Services allows an attacker to corrupt the service's memory, which can cause the application to crash or become unstable. The vulnerability is a classic stack-based overflow that could potentially be leveraged to disrupt service availability depending on the execution context. It poses a denial‑of‑service risk by allowing automated attempts to trigger crashes through malformed input.

The vulnerability affects Hewlett Packard Enterprise's NonStop ODBC/MX Services. Specific product versions are not listed in the data; users should check the latest service packs and releases for the affected functionality.

The CVSS score of 7.3 classifies it as high severity, but the EPSS score of less than 1% indicates a very low probability of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog, meaning no publicly known exploits are reported. The likely attack path requires an attacker to deliver crafted input to the ODBC/MX service, possibly by running custom SQL commands or by exploiting integration points that pass unvalidated strings. Given the lack of known exploits and low EPSS, the risk is moderate but still warrants monitoring.