PT-2026-78996

CVE-2026-76987

Published

2026-08-20

Updated

2026-08-20

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions liftoff-sr CIPster version 1802525be27d33e19a9a83c163e331a1d13b1892

Description A flaw in the Generic Attribute Logic component allows remote attackers to cause memory corruption. This occurs through the manipulation of the CipAttribute::GetAttrData() and CipAttribute::SetAttrData() functions within the ciptypes.h file.

Recommendations Install patch e745d9d4a8ca3a13689066983a1269fe1e567674 for version 1802525be27d33e19a9a83c163e331a1d13b1892.

Exploitability

Exploit

Fix

Impacts

Researchers

Carnegie

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers