CVE-2026-102725

MediumCVSS 6.0

Published: 29/09/2026(UTC)Updated: 29/09/2026(UTC)Translated: 30/09/2026(UTC)NVD NIST

Summary

Out-of-bounds Read from Unvalidated MSRP Attribute List Length. This vulnerability can lead to crash or information leakage.

Risk Assessment

Risk of service crash or unauthorized data disclosure.

Recommendation

Update the MSRP handling software to a patched version and validate attribute list lengths.

Other vulnerabilities in MSRP

CVE-2026-102724Medium
NULL Pointer Dereference When Evicting the Sole MSRP Attribute. This vulnerability can lead to system crash.
CVE-2026-102723Medium
A NULL pointer dereference vulnerability occurs when the MSRP attribute table is exhausted. Table exhaustion leads to dereferencing a NULL pointer, which can crash the application.

Original NVD description (English source)

Out-of-bounds Read from Unvalidated MSRP Attribute List Length

Vulnerability data from NVD (NIST) · CISA KEV · EPSS