6.9

CVE-2026-49760: erlang erl_interface Stack-based Buffer Overflow

CVSS: 6.9v4.0MediumModified
AliasesUBUNTU-CVE-2026-49760DEBIAN-CVE-2026-49760
Published 10-06-2026Last modified 24-09-2026
Open JSON

Vulnerability summary

CVE-2026-49760 is a medium (CVSS 6.9) Stack-based Buffer Overflow vulnerability in erlang erl_interface. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 2.7% of scored vulnerabilities.

Overall risk
28/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.9/10
010
Medium · v4.0 (CVE.org)
EPSS score
0.14%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5 · Related 5
OPENSUSE-SU-2026:11559-1OPENSUSE-SU-2026:11560-1SUSE-SU-2026:3579-1SUSE-SU-2026:3645-1USN-8901-1

Timeline

  1. 10-06-2026
    PublishedVulnerability first disclosed.
  2. 24-09-2026
    Last modifiedVulnerability information updated.

Description

Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow. This vulnerability is associated with program file lib/erl_interface/src/misc/ei_printterm.c and program routine ei_s_print_term. The C function ei_s_print_term uses an internal 2000-character stack buffer to format terms. When called with an encoded Erlang term containing a very large integer (encoded representation exceeding 2000 characters), the buffer overflows. The overflow bytes are restricted to the ASCII values of 0-9 and A-F, which limits exploitation to Denial of Service. The companion function ei_print_term, which prints directly to a FILE instead of a memory buffer, does not contain this bug. This issue affects OTP from OTP 17.0 before OTP 27.3.4.13, OTP 28.5.0.2, and OTP 29.0.2, corresponding to erl_interface from 3.7.16 before 5.5.2.1, 5.7.0.1, and 5.8.1. Whether OTP before OTP 17.0, corresponding to erl_interface before 3.7.16, is affected is unknown.

CVSS metrics

6 scores · 4 sources · 2 versions

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

0.00 pp

From 0.14% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Erlang3 products
  • erl_interface≥ 3.7.16, < 5.5.2.1 | ≥ 5.7, < 5.7.0.1 | ≥ 5.8, < 5.8.1
  • erlang\/otp≥ 17.0, < 27.3.4.13 | ≥ 28.0, < 28.5.0.2 | ≥ 29.0, < 29.0.2
  • otp≥ 17.0 (No fix recorded) | ≥ 3.7.16 (No fix recorded) | ≥ 84adefa331c4159d432d22840663c38f155cd4c1, < 0bef277b2d39dc8babb9ceb4f5d0a456f3007111
Debian1 product
  • erlangAll versions (No fix recorded) | < 1:27.3.4.1+dfsg-1+deb13u3 | < 1:29.0.2+dfsg-1
Ubuntu1 product
  • erlang< 1:16.b.3-dfsg-1ubuntu2.2+esm3 | < 1:18.3-dfsg-1ubuntu3.1+esm4 | < 1:20.2.2+dfsg-1ubuntu2+esm4 | < 1:22.2.7+dfsg-1ubuntu0.5+esm3 | < 1:24.2.1+dfsg-1ubuntu0.8 | < 1:25.3.2.8+dfsg-1ubuntu4.8 | All versions (No fix recorded) | < 1:27.3.4.6+dfsg-1ubuntu0.2

3 vendors · 5 products

References

10 links