CVE-2026-50216

Awaiting Analysis Awaiting Analysis - Queue

Integer Underflow in Akamai Guardicore Platform Agent DNS Proxy

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: MITRE

Description

An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZE_MAX value, causing an allocation failure and uncaught Objective-C exception that aborts the root system extension.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-50216

EUVD

EUVD-2026-100832

Affected Vendors & Products

Vendor	Product	Version / Range
Akamai	Guardicore	Platform Agent 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-191	The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Attack-Flow Graph

Executive Summary

This vulnerability is an integer underflow in the DNS proxy component of the macOS NetworkExtension system extension used by Akamai Guardicore Platform Agent. When a UDP datagram shorter than 96 bytes with a specific starting value is received, a size calculation incorrectly underflows to a very large number. This causes a memory allocation failure and an unhandled Objective-C exception, which crashes the root system extension.

Detection Guidance

This vulnerability involves a DNS proxy component in Akamai Guardicore Platform Agent for macOS. Detection requires monitoring for crashes or exceptions in the NetworkExtension system extension when processing UDP datagrams. Check system logs for unhandled Objective-C exceptions in the GPA process. No specific commands are provided in the context.

Impact Analysis

The crash of the root system extension could disrupt network connectivity and security monitoring on affected macOS systems running the Akamai Guardicore Platform Agent. This may lead to loss of protection and potential exposure to other threats.

Compliance Impact

This vulnerability causes a system extension crash due to an integer underflow in DNS proxy handling, leading to denial of service. It does not directly impact data confidentiality or integrity but may disrupt network security monitoring. Compliance impact depends on the affected system's role in logging or security enforcement.

Mitigation Strategies

Update the Akamai Guardicore Platform Agent to the latest version provided by Akamai to patch the DNS proxy component. If an update is not available, consider disabling the DNS proxy component temporarily until a fix is released.

Hi! I’m here to help you understand CVE-2026-50216. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70