← Back

CVE-2026-8175

nvd nist
Published: May 27, 2026Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: psirt@us.ibm.com (Secondary)

Description

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflow in the asperahttpd component. This vulnerability could be exploited to cause a denial of service and potentially lead to authentication bypass or remote code execution.

Affected (6)

Ibm
2 products
Aspera High Speed Transfer Endpoint
Aspera High Speed Transfer Server
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Aspera High Speed Transfer Endpoint
From 3.7.4 to 4.4.6
Aspera High Speed Transfer Endpoint
Version 4.4.7
Aspera High Speed Transfer Endpoint
Version 4.4.7 fixpack1
Ibm
Aspera High Speed Transfer Server
From 3.7.4 to 4.4.6
Aspera High Speed Transfer Server
Version 4.4.7
Aspera High Speed Transfer Server
Version 4.4.7 fixpack1

Related CWEs

CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.