CRITICAL🇬🇧 English

CVE-2016-10253

CVSS 9.8v3.0pub. 2017-03-18upd. 2026-05-13

An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Erlang Erlang\/otp

    APP
    Erlang
    18.018.0.118.0.218.0.318.118.1.118.1.218.1.318.1.418.1.518.218.2.118.2.218.2.318.2.4+ 48 więcej
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2025-32433CRITICAL10.0⚠ KEVPL ✓ten sam produkt

Erlang/OTP SSH — nieuwierzytelniony RCE (CVSS 10.0)

CVE-2022-37026CRITICAL9.8ten sam produkt

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication...

CVE-2026-48860HIGH7.5ten sam produkt

Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl (inet_tls_dist module) allows unauth...

CVE-2026-48856HIGH7.1ten sam produkt

Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sen...

CVE-2026-49759HIGH8.8ten sam produkt

Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attac...