A stack-based buffer overflow exists in the `sctp parse error chunk()` function within `erts/emulator/drivers/common/inet drv.c`. The function parses SCTP ERROR chunks and writes cause codes into a fixed-size stack-allocated `spec[]` array without performing bounds checking. An unauthenticated remote attacker with an established SCTP association to a listening port can send a crafted SCTP ERROR chunk containing excessive cause codes to overflow the stack buffer, resulting in a crash of the BEAM VM (Denial of Service). Because the attacker can only write 16-bit values interleaved with a fixed tag, a controlled return address cannot be achieved. Additionally, a crafted SCTP ERROR chunk may leak fragments of Erlang VM memory into the received error packet, though the disclosure scope is limited as the data is already readable by the user running the VM. This issue requires SCTP support to be compiled into OTP and a listening SCTP socket to be opened via `gen sctp` with the default inet backend.