A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations (CVE-2026-76664)

CVE-2026-76664 is a vulnerability in HPE NonStop EXPAND that can cause out-of-bounds memory read and write operations. The CVSS 3.1 vector indicates the attack vector is adjacent network (AV:A), with high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), and impacts on confidentiality (C:L), integrity (I:L), and availability (A:H). No detailed technical or exploitation information is provided beyond the out-of-bounds memory access description.

The vulnerability can lead to unauthorized reading and writing of memory outside intended bounds, potentially compromising confidentiality and integrity of data, and causing high impact on availability. However, no known exploits are reported in the wild, and the attack complexity is high, which may limit exploitation likelihood.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fixes or workarounds are provided in the available data.