{"id":"CVE-2026-101290","title":"A remote attacker may send a specially crafted network packet that causes the\naffected application to perform an out-of-bounds memory read due to insufficient validation of\npacket length","summary":"A remote attacker may send a specially crafted network packet that causes the\naffected application to perform an out-of-bounds memory read due to insufficient validation of\npacket length. This may result in an application crash and a den…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"vendor":"SICK AG","product":"Sick_Safetyscanners_Base CPP Driver","affected":["sick_safetyscanners_base_cpp_driver <= 1.0.4"],"published":"2026-10-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T09:17:14.727","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-101290","references":[{"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","label":"psirt@sick.de"},{"url":"https://www.first.org/cvss/calculator/3.1","label":"psirt@sick.de"},{"url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0015.json","label":"psirt@sick.de"},{"url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0015.pdf","label":"psirt@sick.de"},{"url":"https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf","label":"psirt@sick.de"},{"url":"https://www.sick.com/psirt","label":"psirt@sick.de"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-15T08:58:33.092Z","slug":"CVE-2026-101290","body":"## Overview\n\nA remote attacker may send a specially crafted network packet that causes the\naffected application to perform an out-of-bounds memory read due to insufficient validation of\npacket length. This may result in an application crash and a denial-of-service condition.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}