CVE catalog

CVE-2026-54890

Severity: Critical · CVSS 9.1CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published: Jul 27, 2026, 3:39:03 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.42% · Oct 27, 2026

Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BIT_BINARY_EXT tag (77) handler in the External Term Format (ETF) decoder accepts an encoding with both length and trailing-bits fields set to zero. The subsequent computation of the bitstring size underflows an unsigned integer, producing a value of roughly 2^64 that is then passed as a memory allocation size. The allocator aborts the entire node with a message such as "Cannot allocate 2305843009213693951 bytes of memory (of type binary)". The crash is a VM-level abort, not an Erlang-level exception. It cannot be intercepted by supervision trees, by try/catch, or by passing the [safe] option to binary_to_term/2 (which only restricts atom creation and does not perform structural validation of binary encodings). Any application that decodes ETF from untrusted sources via binary_to_term/1,2 or enif_binary_to_term() is exposed. The Erlang distribution protocol also decodes incoming terms through the same code path, but distribution is expected to run on trusted networks per the OTP Secure Coding Guidelines (DSG-011). This issue affects OTP from OTP 27.0 before OTP 29.0.4, OTP 28.5.0.4 and OTP 27.3.4.15, corresponding to erts from 15.0 before 17.0.4, 16.4.0.4 and 15.2.7.11.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	erlang	sid	`1:29.1.2+dfsg-1`	fixed
Debian	erlang	forky	`1:29.1.1+dfsg-1`	fixed
Debian	erlang	trixie	`1:27.3.4.1+dfsg-1+deb13u3`	fixed
Debian	erlang	trixie-security	`1:27.3.4.1+dfsg-1+deb13u4`	fixed
Debian	erlang	bookworm	`1:25.2.3+dfsg-1+deb12u4`	vulnerable
Debian	erlang	bookworm-security	`1:25.2.3+dfsg-1+deb12u1`	vulnerable
Ubuntu	erlang	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-asn1	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-base	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-common-test	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-crypto	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-debugger	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-dev	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-dialyzer	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-diameter	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-doc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-edoc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-eldap	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-erl-docgen	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-et	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-eunit	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-examples	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ftp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-inets	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-jinterface	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-manpages	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-megaco	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-mnesia	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-mode	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-nox	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-observer	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-odbc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-os-mon	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-parsetools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-public-key	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-reltool	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-runtime-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-snmp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-src	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ssh	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ssl	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-syntax-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-tftp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-wx	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-x11	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-xmerl	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang	26.04	`1:27.3.4.1+dfsg-1build1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.3+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.4+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.6+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.6+dfsg-1ubuntu0.1`	fixed
Cpe	erlang\/otp	Not reported	`29.0.4`	fixed
Cpe	erts	Not reported	`17.0.4`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	erlang	source	sid	`1:29.0.4+dfsg-1`	not yet assigned	Not reported	[1142985]
Debian	erlang	source	forky	`1:29.0.4+dfsg-1`	not yet assigned	Not reported	[1142985]
Debian	erlang	source	trixie	`1:27.3.4.1+dfsg-1+deb13u3`	not yet assigned	Not reported	[1142985]
Debian	erlang	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1142985]
Ubuntu	erlang	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-asn1	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-base	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-common-test	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-crypto	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-debugger	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-dev	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-dialyzer	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-diameter	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-doc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-edoc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-eldap	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-erl-docgen	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-et	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-eunit	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-examples	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ftp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-inets	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-jinterface	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-manpages	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-megaco	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-mnesia	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-mode	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-nox	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-observer	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-odbc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-os-mon	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-parsetools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-public-key	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-reltool	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-runtime-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-snmp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-src	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ssh	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ssl	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-syntax-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-tftp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-wx	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-x11	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-xmerl	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang	deb	26.04	`1:27.3.4.6+dfsg-1ubuntu0.1`	Not reported	UBUNTU-CVE-2026-54890	Not reported
Cpe	erlang\/otp	cpe	Not reported	`29.0.4`	Not reported	NVD-CVE-2026-54890	Not reported
Cpe	erts	cpe	Not reported	`17.0.4`	Not reported	NVD-CVE-2026-54890	Not reported

[Debian bug #1142985]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[erlang]Affected
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-asn1]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-base]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-common-test]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-crypto]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-debugger]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-dev]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-dialyzer]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-diameter]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-doc]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-edoc]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-eldap]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-erl-docgen]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-et]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-eunit]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-examples]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-ftp]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-inets]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-jinterface]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-manpages]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

Next results

Observed: Oct 27, 2026, 7:11:32 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]