CVE-2026-24830CWE-190

Integer Overflow or Wraparound in IronOS

Critical · published January 27, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
25.9
In the wild
Unconfirmed
What it is

🔥 An integer overflow in Ralim IronOS could turn your device into a ticking time bomb! Think of it like a water tank whose capacity is miscalculated — once it overflows, the excess water spills out uncontrollably, causing chaos. In this case, the overflow means values can loop back around, leading to unexpected and dangerous behaviors. An attacker could exploit this flaw to manipulate critical operations, resulting in system crashes or even unauthorized access. The ramifications could be absolutely devastating, leaving your system vulnerable to a full takeover!

Put simply

Think of it like a water tank whose capacity is miscalculated — once it overflows, the excess water spills out uncontrollably, causing chaos. In this case, the overflow means values can loop back around, leading to unexpected and dangerous behaviors. This integer overflow vulnerability occurs in Ralim IronOS versions prior to v2.23-rc2 and could lead to wraparound situations where the system misinterprets numerical limits, allowing for potential exploitation.

What to do

An attacker could exploit this flaw to manipulate critical operations, resulting in system crashes or even unauthorized access. The ramifications could be absolutely devastating, leaving your system vulnerable to a full takeover! To protect yourself, upgrade IronOS to version 2.23-rc2 or later immediately. Audit your systems to ensure that no vulnerable versions are in use, and consider implementing additional checks to validate input ranges. You've got this! With these steps, you'll ensure that your systems stay secure and resilient. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00337 · 25.9th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2026-01-27T09:28Z
EPSS history
Timeline
  • 27 JAN 09:28Z
    Integer Overflow or Wraparound in IronOS
    cvelistv5