CVE-2026-54890
Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules),…
Technology
Erlang/OTP
CVSS Score
7.5 / 10.0
Affected Versions
>=27.0 <27.3.4.15; >=28.0 <28.5.0.4; >=29.0 <29.0.4
Upstream Fix
See upstream advisory
Published
July 27, 2026
OSSeva Coverage
Fixed upstream
Description
Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BIT_BINARY_EXT tag (77) handler in the External Term Format (ETF) decoder accepts an encoding with both length and trailing-bits fields set to zero. The subsequent computation of the bitstring size underflows an unsigned integer, producing a value of roughly 2^64 that is then passed as a memory allocation size. The allocator aborts the entire node with a m
Is your Erlang/OTP deployment affected?
If you're running >=27.0 <27.3.4.15; >=28.0 <28.5.0.4; >=29.0 <29.0.4, you need this patch. Book a discovery call to get covered.