CVE-2026-0826
Buffer Overflow in Poly Voice Leading to Remote Code Execution
Publication date: 2026-06-01
Last updated on: 2026-06-01
Assigner: HP Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| poly_voice | poly_voice | * |
| poly_voice | products | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in Poly Voice products running on the Linux platform when the administrator has enabled Interactive Connectivity Establishment (ICE). Under certain conditions, a buffer overflow can happen, which may allow an attacker to execute remote code on the affected system.
How can this vulnerability impact me? :
The impact of this vulnerability is severe as it can lead to remote code execution. This means an attacker could potentially take control of the affected Poly Voice device remotely, leading to unauthorized access, data compromise, disruption of services, or further exploitation within the network.