Approved changes feed: RSS · Atom

cpe:2.3:a:the_epics_community:epics_base:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThe Epics Community (eb017097-8bce-5df4-88e8-4382fc6f7de3)
ProductEpics Base (c3f4ff6f-a944-5721-883b-69e52670c7f5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-114598 vulnerable 2026-11-03 10:15:53.757872 Access of resource using incompatible type ('type confusion') in EPICS Base
HIGH (7.5)
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.
Published: 2026-10-27T16:53:28.775Z
Updated: 2026-11-04T20:23:29.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-114595 vulnerable 2026-11-03 10:15:53.578241 Integer overflow or wraparound in EPICS Base
CRITICAL (9.8)
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.
Published: 2026-10-27T16:48:37.138Z
Updated: 2026-11-04T20:23:57.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-114597 vulnerable 2026-11-03 10:15:53.210720 Improper handling of length parameter inconsistency in EPICS Base
HIGH (7.5)
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.
Published: 2026-10-27T16:51:59.240Z
Updated: 2026-11-04T20:23:42.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-114596 vulnerable 2026-11-03 10:15:53.050323 Integer overflow or wraparound in EPICS Base
HIGH (8.2)
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.
Published: 2026-10-27T16:50:09.514Z
Updated: 2026-11-04T20:23:49.429Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.