01 Record

CVE-2026-72642

Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process

HighPUBLISHEDCNA: elastic

Base score8.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

02 Description

Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process

Published: 2026-08-13 19:13Z23 HR AGO
Last updated: 2026-08-14 03:56Z14 HR AGO
Reserved: 2026-08-10
Assigning CNA: elastic
Record state: PUBLISHED
Severity: High (CVSS 8.8)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-823
SSVC decision: ExploitationnoneAutomatablenoTechnical Impacttotal
Data version: 5.2
Document digest: 8f834ce9cca596d89ad79793ea27be9fe85694fbca51801e841bb0a9ad107529

VendorProductVersionsPlatforms

ElasticElasticsearch8.19.0 to 8.19.19, 9.4.0 to 9.4.4, 9.5.0—