Erts vulnerabilities

4 known vulnerabilities in Erts from Erlang. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  OTP: Signed to Unsigned Conversion Error

  CVE-2026-55737Jul 27, 2026Erlang

  Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format (ETF) binary to binary_to_term/1 to corrupt the BEAM heap pointer and crash the virtual machine

• 7.5 High severity

  OTP: Integer Underflow (Wrap or Wraparound)

  CVE-2026-54890Jul 27, 2026Erlang

  Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c

• 7.5 High severity

  OTP: Improper Handling of Exceptional Conditions

  CVE-2026-42792Jul 27, 2026Erlang

  Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon (epmd) via connection slot exhaustion. The do_accept function in erts/epmd/src/

• 8.2 High severity

  OTP: Stack-based Buffer Overflow

  CVE-2026-49759Jun 10, 2026Erlang

  Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a crafted SCTP ERROR chunk. The sctp_parse_error_chunk function in erts/emulator/drivers/common/inet_drv.c parses