PT-2026-79001

CVE-2026-76988

Published

2026-08-20

Updated

2026-08-20

Description by

CVSS 4.0

5.5

Medium

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

Name of the Vulnerable Software and Affected Versions liftoff-sr CIPster version 1802525be27d33e19a9a83c163e331a1d13b1892

Description A remote out-of-bounds read can be triggered via the ForwardOpen Handler component. The issue exists in the CipConnMgrClass::forward open() function within the cipconnectionmanager.cc file, where manipulation of the product code argument allows for the memory read error.

Recommendations Apply patch ea870a274bf68dfaa3f511f20e2fff6778fb7b74 to version 1802525be27d33e19a9a83c163e331a1d13b1892.

Exploitability

Exploit

Fix

Impacts

Researchers

Carnegie

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer