Buffer overflow in Hcl Software Dfxanalytics
CVE-2026-56455
HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memory container, which can cause the system to crash or become unresponsive. To mitigate this flaw, comprehensive input length checks must be implemented and enforced on both the client and server sides.
Vulnerability class: Buffer Overflow
EPSS: 0.005 (37.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Hcl Software Dfxanalytics — versions version 3.0 and below
- Hcltech Dfxanalytics
Weakness classification (CWE)
References
- psirt@hcl.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2026-56455?
- CVE-2026-56455 is a medium-severity vulnerability in Hcl Software Dfxanalytics, classified under Stack-based Buffer Overflow. CVSS score: 5.3/10. Published 2026-07-16.
- How severe is CVE-2026-56455?
- Medium severity. CVSS v3 base score is 5.3 out of 10.