CVE-2026-101290 PUBLISHED

CVE-2026-101290

Assigner: SICK AG
Reserved: 28.09.2026 Published: 15.10.2026 Updated: 15.10.2026

A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validation of packet length. This may result in an application crash and a denial-of-service condition.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 7.5

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	SICK AG
Product	Sick_Safetyscanners_Base CPP Driver
Versions	Default: affected affected from 0 to 1.0.4 (incl.)

Solutions

Users are recommended to upgrade to version 1.0.5.

Credits

Thanks to kta1kri for reporting this issue in a coordinated manner (URL: https://github.com/kta1kri). finder

References

Problem Types

CWE-125 Out-of-bounds read CWE