Buffer overflow in Erlang Otp

CVE-2026-55737

Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format (ETF) binary to binary_to_term/1 to corrupt the BEAM heap pointer and cras…

Affected products

  • Erlang Otp — versions 13.0, 25.0, ebcbb97b4ec223464cac3d94375739a248ddef6e

Weakness classification (CWE)

References