Log in Start free

Vulnerability · Published Jun 10, 2026 · Assigned by EEF

CVE-2026-49760Stack Buffer Overflow in ei_s_print_term at Very Large Integer

Medium 6.9

In plain English

A medium-severity stack buffer overflow in OTP from Erlang. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)6.9Medium
Exploit odds (30 days)0.1%top 96.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow. This vulnerability is associated with program file lib/erl_interface/src/misc/ei_printterm.c and program routine ei_s_print_term. The C function ei_s_print_term uses an internal 2000-character stack buffer to format terms. When called with an encoded Erlang term containing a very large integer (encoded representation exceeding 2000 characters), the buffer overflows. The overflow bytes are restricted to the ASCII values of 0-9 and A-F, which limits exploitation to Denial of Service. The companion function ei_print_term, which prints directly to a FILE instead of a memory buffer, does not contain this bug. This issue affects OTP from OTP 17.0 before OTP 27.3.4.13, OTP 28.5.0.2, and OTP 29.0.2, corresponding to erl_interface from 3.7.16 before 5.5.2.1, 5.7.0.1, and 5.8.1. Whether OTP before OTP 17.0, corresponding to erl_interface before 3.7.16, is affected is unknown.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12erlangno fix listedDEBIAN-CVE-2026-49760
Debian:13erlang1:27.3.4.1+dfsg-1+deb13u3DEBIAN-CVE-2026-49760
Debian:14erlang1:29.0.2+dfsg-1DEBIAN-CVE-2026-49760
Ubuntu:22.04:LTSerlang1:24.2.1+dfsg-1ubuntu0.8USN-8901-1
Ubuntu:22.04:LTSerlang1:24.2.1+dfsg-1ubuntu0.8UBUNTU-CVE-2026-49760
Ubuntu:24.04:LTSerlang1:25.3.2.8+dfsg-1ubuntu4.8USN-8901-1
Ubuntu:24.04:LTSerlang1:25.3.2.8+dfsg-1ubuntu4.8UBUNTU-CVE-2026-49760
Ubuntu:25.10erlangno fix listedUBUNTU-CVE-2026-49760
Ubuntu:26.04:LTSerlang1:27.3.4.6+dfsg-1ubuntu0.2UBUNTU-CVE-2026-49760
Ubuntu:26.04:LTSerlang1:27.3.4.6+dfsg-1ubuntu0.2USN-8901-1

Affected products (as reported)

VendorProductVersions
Erlang OTP 17.0 – before *
Erlang OTP 3.7.16 – before *
Erlang OTP 84adefa331c4159d432d22840663c38f155cd4c1 – before 0bef277b2d39dc8babb9ceb4f5d0a456f3007111

Weakness: CWE-121 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References