This vulnerability involves a buffer overflow in the Secure Access client from Absolute Software before version 14.50. Specifically, the flaw exists in the message handling function where a crafted message from a malicious server can overwrite part of the client's memory. The attack requires the attacker to control a modified server and produce a cryptographically valid message. The consequence is potentially a denial of service due to memory corruption. The CVSS 4.0 vector indicates network attack vector, high attack complexity, no privileges or user interaction required, and low impact on availability.

Successful exploitation can cause a denial of service on the Secure Access client by overwriting a small portion of memory. The impact is limited to service disruption without indication of code execution or data compromise. The low CVSS score reflects the high complexity of the attack and limited impact scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should be cautious about connecting to untrusted or modified servers. Monitor Absolute Software communications for updates regarding patches or mitigations.