CVE-2026-59250: OTP 17.0 to before 27.3.4.15, 28.0 to before 28.5.0.4, 29.0 to before 29.0.4, 3.17.1 to before 4.7.2.2, 4.8 to before…

Affected technology

OTP · 17.0 to before 27.3.4.15, 28.0 to before 28.5.0.4, 29.0 to before 29.0.4
Erlang

OTP · 3.17.1 to before 4.7.2.2, 4.8 to before 4.8.3.1, 4.9 to before 4.9.1
Erlang

OTP · 84adefa331c4159d432d22840663c38f155cd4c1 to before 8704c8f550a11ed5f825e3c011ecb03565b79c4f
Erlang

Component: megaco_flex_scanner, megaco_flex_scanner_drv
Function: mfs_load_property_groups, megaco_flex_scanner:scan/2
File: lib/megaco/src/flex/megaco_flex_scanner_drv.flex.src, src/flex/megaco_flex_scanner_drv.flex.src

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

A remote unauthenticated attacker can corrupt the driver's memory (and potentially achieve remote code execution or a denial-of-service crash) by sending a single text-encoded H.248/Megaco message containing an oversized property parm name. Source advisory’s CVSS 4.0 assessment (base score 8.3/10) rates confidentiality impact as none; integrity impact as low; availability impact as high.