CVE-2026-79828
A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.
CVSS
7.1
Alto
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 15 oct 2026 · Última mod.: 15 oct 2026 · CWE-122
Sin historial EPSS suficiente todavía.
A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-798316.6 MED—
———A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.7hCVE-2026-798277.1 ALT—
———A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.8hCVE-2026-798267.1 ALT—
———A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.8hCVE-2026-798257.1 ALT—
———A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.8hCVE-2026-798227.1 ALT—
———A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.11hCVE-2026-101307——
———When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the counter to wrap to zero, resulting in a near-zero-length allocation followed by a copy of the existing samples into the undersized buffer. A remote peer can trigger the expansion by sending a sufficient number of ACKs on an established connection.
A remote attacker who can establish a TCP connection to a system using the RACK stack can trigger an out-of-bounds write of approximately 512 KB in the kernel heap possibly resulting in a kernel panic.11h