CVE-2026-75538

CVE-2026-75538 is a signed integer overflow in the Erlang/OTP inet TCP driver when operating in {packet,4} mode. An unauthenticated remote attacker can trigger an incorrect packet-length calculation that overflows the receive buffer into the BEAM VM allocator area (up to ~2 GB), corrupting alloca...

CVE-2026-75538 A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up to about 2 GB. This would easily trash the allocated block'...