All vulnerabilities

Servers and applications

CVE-2026-49760

Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow. This vulnerability is associated with program file lib/erl_interface/src/misc/ei_printterm.c and program routine ei_s_print_term. The C function ei_s_print_term uses an internal 2000-character stack buffer to format terms. When called with an encoded Erlang term containing a very large…

Severity
Medium 6.9
Published
10 Jun 2026
Last changed
24 Sept 2026
Added to UpHeron
16 Oct 2026
Fixed in
27.3.4.13, 28.5.0.2, 29.0.2
Sources
NVD

Affected software

SoftwareAffected versions
Erlang/OTPServers and applications · cpe:a:erlang:erlang\/otp
  • From 17.0 before 27.3.4.13
  • From 28.0 before 28.5.0.2
  • From 29.0 before 29.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-49760
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-49760