USN-8827-1: Erlang vulnerabilities

It was discovered that the Erlang Port Mapper Daemon did not properly handle slow connections. A remote attacker could possibly use this issue to cause a denial of service. CVE-2026-42792 It was discovered that Erlang incorrectly handled certain external term format data, leading to heap...

Megaco flex scanner buffer overflow via oversized property parm name

...

DEBIAN-CVE-2026-59250

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory and potentially achieve remote code execution or a denial-of-service crash by sending a single text-encoded H.248/Megaco message containing an oversized...

EUVD-2026-49324

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory and potentially achieve remote code execution or a denial-of-service crash by sending a single text-encoded H.248/Megaco message containing an oversized...

CVE-2026-59250

Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory and potentially achieve remote code execution or a denial-of-service crash by sending a single text-encoded H.248/Megaco message containing an oversized...

Erlang/OTP -- megaco flex scanner buffer overflow

https://github.com/erlang/otp/security/advisories/GHSA-7xgh-gmgf-q2g7 reports: A remote unauthenticated attacker can crash Erlang nodes running the megaco text codec with the flex scanner option by sending an H.248/Megaco message with a property parm name exceeding 452 bytes. The overflow occurs ...