UpHeron
All vulnerabilities

Servers and applications

CVE-2026-54890

Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BIT_BINARY_EXT tag (77) handler in the External Term Format (ETF) decoder accepts an encoding with both…

Severity
High 8.2
Published
27 Jul 2026
Last changed
10 Aug 2026
Added to UpHeron
16 Oct 2026
Fixed in
27.3.4.15, 28.5.0.4, 29.0.4
Sources
NVD

Affected software

SoftwareAffected versions
Erlang/OTPServers and applications · cpe:a:erlang:erlang\/otp
  • From 27.0 before 27.3.4.15
  • From 28.0 before 28.5.0.4
  • From 29.0 before 29.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-54890
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-54890