CVE-2026-72642: elastic elasticsearch Use of Out-of-range Pointer Offset

Vulnerability summary

CVE-2026-72642 is a high (CVSS 8.8) Use of Out-of-range Pointer Offset vulnerability in elastic elasticsearch. EPSS estimates a 0.60% chance of exploitation in the next 30 days, higher than 48.1% of scored vulnerabilities.

Timeline

1. 13-08-2026
   PublishedVulnerability first disclosed.
2. 14-08-2026
   Last modifiedVulnerability information updated.

Description

The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with the privileges required to upload and deploy a trained model can craft a model that reads and writes memory outside the intended allocation. The result is heap corruption that crashes the inference process, and, with sufficient control over the heap layout, could allow arbitrary code execution in the context of that process.

• CWE-823Use of Out-of-range Pointer OffsetThe product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.