This vulnerability in liftoff-sr CIPster (commit 1802525be27d33e19a9a83c163e331a1d13b1892) involves memory corruption triggered by manipulation of CipAttribute::GetAttrData and CipAttribute::SetAttrData functions in ciptypes.h, part of the Generic Attribute Logic component. The issue is remotely exploitable without authentication or user interaction. Public exploit code exists. A patch commit e745d9d4a8ca3a13689066983a1269fe1e567674 is referenced, but no explicit vendor advisory or remediation level is provided.

Successful exploitation can cause memory corruption remotely, potentially leading to application instability or other undefined behavior. The CVSS 4.0 score is 6.9 (medium), reflecting network attack vector, low complexity, no privileges or user interaction required, and low to low integrity and availability impacts. No known active exploitation in the wild is reported.

A patch identified by commit e745d9d4a8ca3a13689066983a1269fe1e567674 is suggested to address the issue. However, no official vendor advisory or remediation level is available to confirm patch status. It is recommended to apply this patch if possible. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.