CVE-2026-49759
Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an…
Technology
Erlang/OTP
CVSS Score
8.2 / 10.0
Affected Versions
>=17.0 <27.3.4.13; >=28.0 <28.5.0.2; >=29.0 <29.0.2
Upstream Fix
See upstream advisory
Published
June 10, 2026
OSSeva Coverage
Fixed upstream
Description
Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a crafted SCTP ERROR chunk. The sctp_parse_error_chunk function in erts/emulator/drivers/common/inet_drv.c parses SCTP ERROR chunks and writes cause codes into a fixed-size stack-allocated ErlDrvTermData spec[] array without checking bounds. A remote attacker who has established an SCTP association to a listening port can send a single crafted SCTP ERROR chunk containing enough cause codes to overflow the stack buffer, crashing the VM. The attacker can only write 16-bit values interleaved with a fix
Is your Erlang/OTP deployment affected?
If you're running >=17.0 <27.3.4.13; >=28.0 <28.5.0.2; >=29.0 <29.0.2, you need this patch. Book a discovery call to get covered.
View Erlang/OTP coverage →Get a quote
Running Erlang/OTP >=17.0 <27.3.4.13; >=28.0 <28.5.0.2; >=29.0 <29.0.2?
Send your work email and a senior engineer will tell you whether this CVE applies to your versions and who patches it. Reply within 1 business day.
Prefer to talk or read more first?