This vulnerability involves a buffer overflow in the Secure Access client from Absolute Software before version 14.50. The flaw exists in the message parsing function, where a specially crafted packet from a malicious server can overwrite a small memory area. This may lead to memory corruption or denial of service conditions. The CVSS 4.0 vector indicates network attack vector with high attack complexity, requiring user interaction and partial attack prerequisites. No vendor advisory or patch information is currently available.

Successful exploitation can cause memory corruption or denial of service in the Secure Access client. The low CVSS score reflects limited severity and complexity, with no known active exploitation. The impact is confined to client availability and stability without evidence of privilege escalation or data breach.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid connecting to untrusted or potentially compromised servers. Monitor Absolute Software communications for updates on patches or mitigations.