CVE-2026-55737— erlang/otp 数字错误漏洞
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2026-55737 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder
来源: CVE Program / CVE List V5
Vulnerability Description
Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format (ETF) binary to binary_to_term/1 to corrupt the BEAM heap pointer and crash the virtual machine. When decoding a LARGE_TUPLE_EXT term, the validation pass decoded_size() in erts/emulator/beam/external.c reads the 32-bit arity field as unsigned (get_uint32()), while the decode pass dec_term() reads the same field as a signed 32-bit integer (get_int32()) into an int. An arity wire value of 0x80000000 passes validation as 2147483648 but decodes as -2147483648, so the subsequent hp += n moves the heap allocation pointer backward. Neither pass enforces the runtime tuple-arity limit MAX_ARITYVAL. The result is an out-of-bounds heap write; in practice the VM detects an impossible heap size and aborts, denying service. The required padding is large when uncompressed but the compressed-ETF envelope shrinks it to a small payload on the wire. This issue affects OTP from OTP 25.0 before OTP 29.0.4, OTP 28.5.0.4 and OTP 27.3.4.15, corresponding to erts from 13.0 before 17.0.4, 16.4.0.4 and 15.2.7.11.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
来源: CVE Program / CVE List V5
Vulnerability Type
有符号至无符号转换错误
来源: CVE Program / CVE List V5
Vulnerability Title
erlang/otp 数字错误漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
erlang erlang/otp是erlang社区开源的一套并发编程语言及运行时系统。 erlang/otp 25.0版本至29.0.4之前版本存在安全漏洞，该漏洞源于有符号数与无符号数转换错误和越界写入，可能导致攻击者通过特制的Erlang外部项格式（ETF）二进制数据破坏BEAM堆指针并造成虚拟机崩溃。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2026-55737 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-55737 的情报信息
请登录查看更多情报信息。
CVE-2026-55737 补丁与修复 (1)
CVE-2026-55737 厂商安全公告 (3)
同批安全公告 · Erlang · 2026-07-27 · 共 8 条
| CVE-2026-55953 | 9.1 CRITICAL | Erlang OTP 加密问题漏洞 |
| CVE-2026-58227 | 8.7 HIGH | Erlang OTP 资源管理错误漏洞 |
| CVE-2026-59251 | 8.7 HIGH | Erlang OTP 资源管理错误漏洞 |
| CVE-2026-59250 | 8.3 HIGH | Erlang OTP 缓冲区错误漏洞 |
| CVE-2026-54890 | 8.2 HIGH | erlang/otp 输入验证错误漏洞 |
| CVE-2026-42792 | 6.3 MEDIUM | Erlang OTP 异常处理不当漏洞 |
| CVE-2026-47078 | 4.8 MEDIUM | Erlang OTP 路径遍历漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-55737
暂无评论