CVE-2026-63550

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The MMS BER decoder has a boundary-handling flaw when processing specific fields in confirmed-request messages. If a crafted BER-encoded element is sent over an established MMS session via TCP port 102, the decoder may incorrectly advance its internal read position. This leads to a heap out-of-bounds read, which causes the MMS handling process to terminate unexpectedly and results in a denial-of-service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.