A corrupted database file can trigger an out‑of‑bounds read in HPE NonStop SQL/MX EXE. This flaw may leak sensitive data from memory, terminate transactions, cause the processor to halt or corrupt stored information. The weakness is a classic buffer overread identified as CWE‑125.

The vulnerability affects Hewlett Packard Enterprise HPE NonStop SQL/MX EXE. No specific version numbers are supplied in the advisory, so all installations of the product could potentially be impacted pending further product‑level confirmation.

The CVSS score of 6.5 denotes moderate severity, while an EPSS score of <1% indicates a very low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed widespread exploitation. The likely attack vector is the ingestion of a malformed file or corrupted database object that the SQL/MX EXE parses, implying that the threat is most acute for environments where database files are introduced by untrusted actors or where local file tampering is possible. If successfully leveraged, an attacker could gain read access to internal data, induce service disruptions, or corrupt critical datasets.