← Back

CVE-2026-47863

nvd nist
Published: Aug 27, 2026Modified: Sep 1, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition. Reactor Core 3.8.0 - 3.8.6 Reactor Core 3.7.19 and earlier

Affected (2)

Broadcom
1 product
Reactor Core
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Broadcom
Reactor Core
From 3.5.7 to 3.7.20
Reactor Core
From 3.8.0 to 3.8.6.1

Related CWEs

CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.