CVE-2026-115680
Received Received - Intake

DHCPv6 Option-Walk Over-Reads in Keil MDK-Middleware

Vulnerability report for CVE-2026-115680, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: Arm Limited

Description

Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Keil MDK-Middleware 8.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Arm Keil MDK-Middleware versions 8.0.0 to 8.3.0 involves potential DHCPv6 Option-Walk Over-Reads and unintended data retransmission. This means the software may incorrectly process DHCPv6 options, leading to memory over-reads or sending data unintentionally.

Impact Analysis

The vulnerability could allow attackers to trigger memory over-reads or cause unintended data retransmission, potentially leading to information disclosure or denial-of-service conditions in systems using affected MDK-Middleware versions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-115680. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart