Cve-2026-76987 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/cve-2026-76987/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 20 Aug 2026 15:15:29 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMemory Corruption Vulnerability in liftoff-sr CIPsterhttps://feed.craftedsignal.io/briefs/2026-08-cve-2026-76987/Thu, 20 Aug 2026 15:15:29 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-08-cve-2026-76987/A remote memory corruption vulnerability in the Generic Attribute Logic component of liftoff-sr CIPster allows for unauthenticated exploitation via the GetAttrData and SetAttrData functions.A memory corruption vulnerability, tracked as CVE-2026-76987, affects the Generic Attribute Logic component within liftoff-sr CIPster (specifically version 1802525be27d33e19a9a83c163e331a1d13b1892). The flaw originates in the CipAttribute::GetAttrData and CipAttribute::SetAttrData functions located within the ciptypes.h header file. This vulnerability is significant because it can be triggered remotely without authentication. The vulnerability has been publicly disclosed, and exploit code is available, increasing the risk of exploitation. Defenders must verify the version of the CIPster component in use and apply the recommended patch e745d9d4a8ca3a13689066983a1269fe1e567674 immediately to prevent potential remote code execution or application crashes resulting from memory corruption.

Impact

The vulnerability poses a high risk to availability and system integrity due to the potential for memory corruption. Attackers can remotely exploit this flaw, which may lead to service disruption (denial of service) or potential arbitrary code execution depending on the environment. The scope of impact includes any deployment utilizing the vulnerable CIPster component, particularly those exposed to network traffic.

Recommendation

  • Identify all instances of liftoff-sr CIPster within the environment and verify if the commit 1802525be27d33e19a9a83c163e331a1d13b1892 is present.
  • Apply patch e745d9d4a8ca3a13689066983a1269fe1e567674 to all affected CIPster components.
  • Restrict network access to services utilizing the Generic Attribute Logic component if patching cannot be performed immediately.
]]>highadvisoryvulnerabilitycve-2026-76987memory-corruption