CVE-2026-102056: CWE-125 Out-of-bounds Read in Juniper Networks Junos OS

This vulnerability (CWE-125) exists in the cfmd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated attacker with adjacency network access to trigger an out-of-bounds read by sending a specific CFM message to a configured interface. The result is a crash of the cfmd daemon and limited disclosure of process memory. The vulnerability affects multiple versions across several release trains of Junos OS and Junos OS Evolved, as explicitly enumerated. The CVSS 3.1 vector indicates the attack requires adjacent network access, no privileges or user interaction, and impacts confidentiality (limited), and availability (high). No known exploits in the wild have been reported. Patch information is not provided in the input, so patch status is not confirmed.

Successful exploitation can cause the cfmd daemon to crash, resulting in denial of service. Additionally, limited process memory disclosure may occur, potentially leaking sensitive information. The attacker does not require authentication but must be on an adjacent network. The impact on confidentiality is limited, but availability impact is high due to daemon crash.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, limit access to the affected interfaces to trusted adjacent networks to reduce exposure. Monitor for unusual cfmd process crashes and consider applying any vendor-provided temporary mitigations once available.