CVE-2026-40424 is an out-of-bounds read vulnerability in Hyperscan versions prior to v5.4.2.1. It allows an unprivileged, unauthenticated local user to cause a denial of service without requiring user interaction. The vulnerability impacts system availability with low confidentiality impact and no integrity impact.