CVE-2026-75538: CWE-190 Integer Overflow or Wraparound in Erlang OTP

This vulnerability involves a signed integer overflow in the packet length calculation within the inet driver of Erlang OTP when operating in {packet,4} mode on an open TCP port. The overflow allows an attacker to overflow the receive buffer into the VM allocator area, corrupting allocator metadata and potentially causing the BEAM VM to crash. The vulnerability affects OTP versions from 17.0 up to but not including 27.3.4.17, 28.0 up to but not including 28.5.0.6, and 29.0 up to but not including 29.0.6, as well as corresponding erts versions 6.0 up to but not including 15.2.7.13, 16.0 up to but not including 16.4.0.6, and 17.0 up to but not including 17.0.6. Whether versions prior to OTP 17.0 are affected is unknown. While the vulnerability can cause a crash, achieving remote code execution is deemed extremely unfeasible.

Successful exploitation can cause a denial of service by crashing the BEAM VM due to corrupted allocator metadata from the buffer overflow. There is no confirmed capability for remote code execution, making the primary impact a crash and service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should monitor official Erlang OTP advisories for updates and apply any released patches addressing this vulnerability. Until patches are available, restricting access to open Erlang TCP ports using {packet,4} mode may reduce exposure.