Buffer overflow in Bitdefender Napoca Bare-metal Hypervisor

CVE-2026-10047

The Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the real-mode hook handler, implemented in napoca/kernel/handler.c. The handler uses a guest-controlled SS:SP-derived offset as an index into the…

Vulnerability class: Buffer Overflow

EPSS: 0.000 (2.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References