🔐 CVE Alert

CVE-2026-49760

UNKNOWN 0.0

Stack Buffer Overflow in ei_s_print_term at Very Large Integer

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow. This vulnerability is associated with program file lib/erl_interface/src/misc/ei_printterm.c and program routine ei_s_print_term. The C function ei_s_print_term uses an internal 2000-character stack buffer to format terms. When called with an encoded Erlang term containing a very large integer (encoded representation exceeding 2000 characters), the buffer overflows. The overflow bytes are restricted to the ASCII values of 0-9 and A-F, which limits exploitation to Denial of Service. The companion function ei_print_term, which prints directly to a FILE instead of a memory buffer, does not contain this bug. This issue affects OTP from OTP 17.0 before 27.3.4.13, 28.5.0.2 and 29.0.2, corresponding to erl_interface from 3.7.16 before 5.5.2.1, 5.7.0.1 and 5.8.1.

CWE CWE-121
Vendor erlang
Product otp
Published Jun 10, 2026
Last Updated Jun 10, 2026
Stay Ahead of the Next One

Get instant alerts for erlang otp

Be the first to know when new unknown vulnerabilities affecting erlang otp are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Erlang / OTP
3.7.16 < *
Erlang / OTP
17.0 < * 84adefa331c4159d432d22840663c38f155cd4c1 < 0bef277b2d39dc8babb9ceb4f5d0a456f3007111

References

NVD ↗ CVE.org ↗ EPSS Data ↗
github.com: https://github.com/erlang/otp/security/advisories/GHSA-xcxj-5pg2-v72j cna.erlef.org: https://cna.erlef.org/cves/CVE-2026-49760.html osv.dev: https://osv.dev/vulnerability/EEF-CVE-2026-49760 erlang.org: https://www.erlang.org/doc/system/versions.html#order-of-versions github.com: https://github.com/erlang/otp/commit/0bef277b2d39dc8babb9ceb4f5d0a456f3007111

Credits

Jonatan Männchen / EEF Sverker Eriksson