CVE-2026-79831
A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.
CVSS
6.6
Medium
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Oct 15, 2026 · Last modified: Oct 15, 2026 · CWE-122
Not enough EPSS history yet.
A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-798287.1 HIG—
———A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.9hCVE-2026-798277.1 HIG—
———A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.9hCVE-2026-798267.1 HIG—
———A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.9hCVE-2026-798257.1 HIG—
———A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.9hCVE-2026-798227.1 HIG—
———A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.12hCVE-2026-101307——
———When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the counter to wrap to zero, resulting in a near-zero-length allocation followed by a copy of the existing samples into the undersized buffer. A remote peer can trigger the expansion by sending a sufficient number of ACKs on an established connection.
A remote attacker who can establish a TCP connection to a system using the RACK stack can trigger an out-of-bounds write of approximately 512 KB in the kernel heap possibly resulting in a kernel panic.12h