CVE-2026-21807: CWE-121 Stack-based buffer overflow in HCLSoftware BigFix Quantum Risk Analyzer

The HCLSoftware BigFix Quantum Risk Analyzer version 2.0.1.47 contains a stack-based buffer overflow vulnerability (CWE-121) due to missing critical hardening protections in its binary. This flaw could potentially be exploited by an attacker with high privileges and local access to cause memory corruption. The CVSS 3.1 base score is 3.9, reflecting low impact on confidentiality, integrity, and availability, and requiring high attack complexity and privileges. No vendor advisory or patch information is currently provided.

An attacker with high privileges and local access could exploit this vulnerability to cause a stack-based buffer overflow, potentially leading to limited confidentiality, integrity, and availability impacts. The low CVSS score and lack of known exploits suggest the impact is limited and exploitation is not straightforward.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor HCLSoftware advisories for updates. No specific mitigation steps are provided by the vendor at this time.