CVE-2026-102164: CWE-125 Out-of-bounds Read in Arista Networks Wi-Fi Access Points

This vulnerability involves an out-of-bounds read in Arista Networks Wi-Fi Access Points under a unique configuration involving VXLAN tunnelling and L2-proxy. An attacker with wireless access to the tunnelled SSID can send a specially crafted packet that triggers the device to disclose portions of its memory in network traffic. The flaw does not allow modification of memory or remote code execution. The affected versions include all releases from 1.0.0 up to and including 21.3.0M-13, and from 21.3.0 up to 22.0.1F-32. The CVSS 3.1 base score is 3.1, reflecting low impact primarily on confidentiality. No known exploits are reported, and no vendor patch information is provided in the input data.

The impact is limited to unauthorized disclosure of memory contents from the affected access points when configured in a specific way. There is no impact on integrity or availability, and no remote code execution or write capabilities are possible. The confidentiality impact is low, as indicated by the CVSS score and vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, avoid using the vulnerable VXLAN tunnelling and L2-proxy configuration with tunnelled SSIDs or restrict wireless client access to trusted users only. Monitor vendor communications for updates.