CVE-2026-65200

Name of the Vulnerable Software and Affected Versions openUBMC (affected versions not specified)

Description The device-management process in openUBMC improperly handles PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices. Three response parsers within the shared transport libraries subtract a fixed header or reserved-field size from a response length provided by the device without performing a lower-bound check. If a response is undersized, the unsigned length difference wraps to a very large value, causing the parser to read memory far beyond the response buffer. This issue affects the base PLDM control class and the Huawei NCSI driver, making it reachable via any PLDM endpoint or Huawei NIC on the internal management bus.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.