Summary
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
Products not listed in the Impact Details section have not been evaluated. Furthermore, products that have exceeded any software maintenance time periods are also not evaluated and will not be published. Please consult End of Sale and End of Service Life - Extreme Networks for the EOL notices related to the product under question.
Products Potentially Affected
None
Impact Details
|
OS/Product
|
Exposure
|
|
ExtremeAnalytics for Site Engine
|
No
|
|
ExtremeCloud IQ (XIQ)
|
No
|
|
ExtremeCloud IQ - Site Engine (XIQ-SE)
|
No
|
|
ExtremeCloud Orchestrator (XCO/EFA)
|
No
|
|
Tunnel Concentrator
|
No
|
|
Extreme Platform ONE
|
No
|
|
Universal Compute Platform (UCP)
|
No
|
|
Extreme AirDefense
|
No
|
|
ExtremeCloud A3
|
No
|
|
ExtremeCloud Universal ZTNA
|
No
|
|
ExtremeControl for Site Engine
|
Impacted
|
|
ExtremeCloud SD-WAN Appliance
|
No
|
|
ExtremeCloud SD-WAN Orchestrator
|
No
|
|
Extreme OS ONE
|
No
|
|
Fabric Engine (VOSS)
|
No
|
|
ISW
|
No
|
|
SLX-OS
|
No
|
|
Switch Engine (EXOS)
|
No
|
|
CampusWirelessAP
|
No
|
|
ExtremeCloud IQ Controller (IQC/XCC)
|
No
|
|
IQ Engine (HiveOS)
|
Impacted
|
|
WiNG
|
Investigating
|
|
WiNG Manager
|
No
|
Repair Recommendations
ExtremeControl for Site Engine:
- Fixed in 26.11.10 or later. (Target GA: November 2026)
Please refer to KB Article Number: 000139710 regarding field patch instructions.
IQ Engine (HiveOS)
- Fixed in 10.8.5h or later.
- Fixed in 10.9.2a or later.
Please see the full Security Advisory here for more details and future updates.
