A stack-based buffer overflow flaw exists in the security library of Brocade Fabric OS and is triggered during the parsing of X.509 PEM certificates that are displayed in management interfaces. The length of the Authority Key Identifier (AKI) extension is not validated before string tokens are copied into a stack buffer. An attacker who has administrative rights to import custom certificates can supply a certificate with an intentionally oversized AKI. When the system processes or renders the certificate attributes, the overflow corrupts the stack and crashes the management daemon, resulting in a denial‑of‑service condition.

Brocade Fabric OS versions prior to 10.0.1 are affected. The vendor has released a security update starting with version 10.0.1 that resolves this issue.

The CVSS score is 6.9, indicating a moderate severity vulnerability. No EPSS score is available, and the flaw is not listed in the CISA KEV catalog. Exploitation requires an authenticated user with administrative privileges to import a certificate, limiting the attack surface to trusted users. While the impact is limited to crashing the management daemon, the denial of management functionality can disrupt operations and may allow further opportunistic exploitation in environments that rely on continuous management access.