CVE-2026-76987: Memory Corruption in liftoff-sr CIPster
Description
CVE-2026-76987 is a medium severity memory corruption vulnerability in liftoff-sr CIPster affecting the Generic Attribute Logic component. The flaw exists in the CipAttribute::GetAttrData and CipAttribute::SetAttrData functions in the ciptypes.h file. An attacker can remotely trigger this vulnerability without authentication or user interaction. Public exploit code has been released. A patch identified by commit e745d9d4a8ca3a13689066983a1269fe1e567674 is available to address the issue.
CVSS v4.0
Score 6.9medium
Affected software
liftoff-sr
CIPster
cpe:2.3:a:liftoff-sr:cipster:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in liftoff-sr CIPster involves memory corruption caused by manipulation of the CipAttribute::GetAttrData and CipAttribute::SetAttrData functions within the Generic Attribute Logic component (ciptypes.h). The flaw can be exploited remotely without privileges or user interaction. Exploit code has been publicly released, increasing the risk of attacks. A patch commit e745d9d4a8ca3a13689066983a1269fe1e567674 has been identified to fix the issue.
Potential Impact
Successful exploitation can lead to memory corruption remotely, potentially allowing an attacker to cause application instability or execute arbitrary code. The vulnerability requires no privileges or user interaction, increasing its risk. The CVSS 4.0 score is 6.9 (medium severity), reflecting the network attack vector and low complexity but limited scope and impact.
Mitigation Recommendations
A patch identified by commit e745d9d4a8ca3a13689066983a1269fe1e567674 is available and should be applied to remediate this vulnerability. Installing this patch is the recommended mitigation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-20T06:51:55.087Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a86f536acd9273b499be463
Added to database: 08/20/2026, 12:38:14 UTC
Last enriched: 09/11/2026, 04:48:29 UTC
Last updated: 10/04/2026, 16:08:41 UTC
Views: 68
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.