CVE-2026-55737: Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder

Overview

Severity
N/A
Exploit Status
Not Exploited
Patch Tuesday
2026-Aug
Released
2026-08-07
EPSS Score
0.13% (percentile: 2.7%)

Affected Products (1)

Open Source Software

  • azl3 erlang 26.2.5.21-4 on Azure Linux 3.0

Revision History

  • 2026-08-07: Information published.