CVE-2019-10974

MEDIUM

NREL EnergyPlus < 8.6.0 - Stack-based Buffer Overflow

Title source: llm

Description

NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://www.us-cert.gov/ics/advisories/icsa-19-204-02

Scores

CVSS v3 5.5

EPSS 0.0034

EPSS Percentile 25.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-121 CWE-787

Status published

Products (1)

nrel/energyplus < 8.6.0

Published Jul 26, 2019

Tracked Since Feb 18, 2026