A heap-based buffer overflow exists in Hitachi JP1/Base. The flaw permits overflowing internal heap buffers when improperly validated data is processed, enabling an attacker to corrupt memory and potentially execute arbitrary code. This can lead to full compromise of the affected system, including theft, destruction or modification of data and disruption of business processes.

Hitachi JP1/Base versions starting from 11‑00 up to, but not including, 12‑50‑54 are vulnerable. All releases in that range should be considered affected.

The CVSS score of 9.8 marks this as a critical vulnerability, suggesting severe confidentiality, integrity, and availability impacts if exploited. EPSS data is unavailable, and the vulnerability is not listed in CISA's KEV catalog, indicating no known widespread active exploitation yet. Based on the nature of heap corruption in an enterprise monitoring product, the likely attack vector is remote through privileged or authenticated interactions with the JP1/Base service, although local exploitation of the service is also conceivable. To mitigate potential impact, organizations should treat this as a top‑priority risk and assess whether the affected process is exposed to untrusted input.