An unauthenticated adjacent buffer overflow flaw exists in the underlying operating system of AOS‑10 or AOS‑8 and could allow an attacker without credentials to cause a denial of service. Successful exploitation could disrupt the availability of the affected system, with a limited impact on the integrity of the component. The vulnerability arises from improper handling of input that exceeds a memory buffer boundary, leading to a crash or restart of the vulnerable process.

The flaw is known to affect Hewlett Packard Enterprise AOS‑10 and AOS‑8 platforms. No detailed component or version information is provided beyond the product names, so all installations of these operating systems are potentially exposed.

The CVSS score of 7.1 indicates a high impact on system availability. The EPSS score of < 1% indicates a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The attacker does not need authentication, suggesting a network‑based approach that can be initiated from anywhere the vulnerable service is reachable. If successful, the buffer overflow will result in a service crash without any other damage to data or configuration.