CVE-2026-55737 | Erlang OTP prior 27.3.4.15/28.5.0.4/29.0.4 External Term Format Decoder external.c decoded_size out-of-bounds write

July 27, 2026 Yanac

A vulnerability classified as problematic has been found in Erlang OTP. This affects the function decoded_size of the file erts/emulator/beam/external.c of the component External Term Format Decoder. This manipulation causes out-of-bounds write.

This vulnerability appears as CVE-2026-55737. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More