CVE-2026-79843: CWE-125 Out-of-bounds read in Hewlett Packard Enterprise HPE NonStop SQL/MX EXE
Description
A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or data corruption.
CVSS v3.1
Score 6.5medium
Affected software
Hewlett Packard Enterprise
HPE NonStop SQL/MX EXE
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an out-of-bounds read (CWE-125) in the HPE NonStop SQL/MX EXE component triggered by a corrupted file. The flaw can lead to multiple impacts including information disclosure, process termination, CPU halt, or data corruption. The CVSS 3.1 base score is 6.5, reflecting a medium severity with local attack vector, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. There is no vendor advisory or patch information available to confirm remediation status.
Potential Impact
Successful exploitation may result in unauthorized information disclosure, unexpected termination of processes, halting of CPU operations, or corruption of data within the affected system. These impacts can affect system stability and data integrity.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected component and avoid processing corrupted files if possible.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- hpe
- Date Reserved
- 2026-08-25T14:47:15.582Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ad0eb702cdf04f6563e7c4f
Added to database: 10/15/2026, 15:04:16 UTC
Last enriched: 10/15/2026, 15:18:30 UTC
Last updated: 10/15/2026, 19:00:26 UTC
Views: 14
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.