Out-of-Bounds Write in Industrial Control Application

Publication date: 2026-07-07

Last updated on: 2026-07-07

Assigner: ICS-CERT

Description

The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-07

Last Modified

2026-07-07

Generated

2026-07-08

AI Q&A

2026-07-08

EPSS Evaluated

N/A

NVD

CVE-2026-42953

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds write issue in an application. It allows an attacker to write data beyond the allocated memory buffer, which can corrupt memory and potentially enable the attacker to execute arbitrary code.

Impact Analysis

The impact of this vulnerability includes the possibility of arbitrary code execution by an attacker. This means the attacker could run malicious code on the affected system, potentially leading to system compromise, data loss, or unauthorized control.

Hi! I’m here to help you understand CVE-2026-42953. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70