This vulnerability involves a buffer overflow (CWE-121) in the Secure Access client from Absolute Software before version 14.50. The flaw exists in the message handling code, where a malicious server can send a cryptographically valid message that overwrites a small memory area on the client side. The impact is limited to denial of service. The CVSS 4.0 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, and low impact on availability. No patch or official remediation level has been published by the vendor as of the data provided.

Successful exploitation can cause a denial of service on the Secure Access client by overwriting a small portion of memory. There is no indication of code execution or data disclosure. The impact is limited and rated low severity with a CVSS score of 2.3. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should be cautious about connecting to untrusted or modified servers. No official remediation or temporary fix is currently documented.