CVEvulnerability

CVE-2026-81575

7.5 HIGH Published 2026-08-27 Modified 2026-09-01 Official page ↗
Status
Awaiting Analysis
Published
2026-08-27
Last modified
2026-09-01
Assigner
2fc02b1f-71e7-4514-a878-169626f68903
CVSS 3.1 (2fc02b1f-71e7-4514-a878-169626f68903)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-130

Description

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes the CodeMeter Runtime.

Related

Weakness · CWE (1)

  • CWE-130 Improper Handling of Length Parameter Inconsistency weakness

References