Heap-based Buffer Overflow in SecureAge CatchPulse Driver

Publication date: 2026-07-12

Last updated on: 2026-07-12

Assigner: VulDB

Description

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-12

Last Modified

2026-07-12

Generated

2026-07-13

AI Q&A

2026-07-13

EPSS Evaluated

N/A

NVD

CVE-2026-15506

Affected Vendors & Products

Vendor	Product	Version / Range
secureage	catchpulse	to 10.9.3 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This vulnerability exists in SecureAge CatchPulse up to version 10.9.3, specifically in an unknown function within the saappctl.sys driver library. It is a heap-based buffer overflow vulnerability, which means that improper handling of memory allocation on the heap can be exploited by an attacker.

The attack must be performed locally, meaning the attacker needs local access to the system to exploit this vulnerability. The vulnerability has been publicly disclosed and the vendor was informed early about it.

Impact Analysis

Exploitation of this heap-based buffer overflow vulnerability can lead to serious impacts including potential compromise of the affected system's confidentiality, integrity, and availability.

An attacker with local access could execute arbitrary code or cause a denial of service.
Because the vulnerability affects a driver component, it may allow escalation of privileges or system instability.

Hi! I’m here to help you understand CVE-2026-15506. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70