Signed to Unsigned Conversion Error in Erlang OTP - CVE-2026-55737

Vulnerability identifier: #VU146825

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-55737

CWE-ID: CWE-195

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to signed to unsigned conversion error in LARGE_TUPLE_EXT decoding in binary_to_term/1 when parsing untrusted external term format data. A remote attacker can supply a specially crafted binary term to cause a denial of service.

The issue affects the Erlang runtime functions decoded_size() and dec_term() in external.c.

Erlang OTP
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP6
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
Ubuntu
Server Applications Module
openSUSE Leap
openEuler
PowerVC
erlang-wx
erlang-epmd-debuginfo
erlang-debugsource
erlang
erlang-epmd
erlang-debuginfo
erlang-dialyzer
erlang-wx-debuginfo
erlang-debugger-src
erlang-diameter
erlang-et-src
erlang-dialyzer-debuginfo
erlang-et
erlang-reltool-src
erlang-reltool
erlang-observer
erlang-debugger
erlang-wx-src
erlang-dialyzer-src
erlang-jinterface
erlang-src
erlang-doc
erlang-diameter-src
erlang-jinterface-src
erlang-observer-src
erlang-crypto
erlang-edoc
erlang-eldap
erlang-erl_docgen
erlang-erl_interface
erlang-erts
erlang-eunit
erlang-compiler
erlang-common_test
erlang-asn1
erlang-xmerl
erlang-tools
erlang-tftp
erlang-syntax_tools
erlang-stdlib
erlang-ssl
erlang-ssh
erlang-snmp
erlang-sasl
erlang-runtime_tools
erlang-examples
erlang-public_key
erlang-parsetools
erlang-os_mon
erlang-odbc
erlang-mnesia
erlang-megaco
erlang-kernel
erlang-inets
erlang-ftp
erlang26-debugger-src
erlang26-jinterface-src
erlang26-epmd
erlang26-jinterface
erlang26-wx-src
erlang26-dialyzer-src
erlang26-diameter-src
erlang26-wx
erlang26-et
erlang26-debugger
erlang26-reltool-src
erlang26-reltool
erlang26-dialyzer-debuginfo
erlang26-epmd-debuginfo
erlang26-debugsource
erlang26-et-src
erlang26
erlang26-dialyzer
erlang26-observer
erlang26-debuginfo
erlang26-src
erlang26-observer-src
erlang26-wx-debuginfo
erlang26-diameter
erlang26-doc
erlang27-src
erlang27-dialyzer-debuginfo
erlang27-reltool-src
erlang27-dialyzer
erlang27-debuginfo
erlang27-diameter-src
erlang27-epmd
erlang27
erlang27-dialyzer-src
erlang27-debugsource
erlang27-reltool
erlang27-jinterface-src
erlang27-jinterface
erlang27-epmd-debuginfo
erlang27-diameter
erlang (Ubuntu package)
erlang (Debian package)

Install security update from vendor's website.

Erlang OTP - addressed in versions 27.3.4.15, 28.5.0.4, 29.0.4
erlang-wx - update to 23.3.4.19-150300.3.39.1
erlang-epmd-debuginfo - update to 23.3.4.19-150300.3.39.1
erlang-debugsource - update to 23.3.4.19-150300.3.39.1
erlang - update to 23.3.4.19-150300.3.39.1
erlang-epmd - update to 23.3.4.19-150300.3.39.1
erlang-debuginfo - update to 23.3.4.19-150300.3.39.1
erlang-dialyzer - update to 23.3.4.19-150300.3.39.1
erlang-wx-debuginfo - update to 23.3.4.19-150300.3.39.1
erlang-debugger-src - update to 23.3.4.19-150300.3.39.1
erlang-diameter - update to 23.3.4.19-150300.3.39.1
erlang-et-src - update to 23.3.4.19-150300.3.39.1
erlang-dialyzer-debuginfo - update to 23.3.4.19-150300.3.39.1
erlang-et - update to 23.3.4.19-150300.3.39.1
erlang-reltool-src - update to 23.3.4.19-150300.3.39.1
erlang-reltool - update to 23.3.4.19-150300.3.39.1
erlang-observer - update to 23.3.4.19-150300.3.39.1
erlang-debugger - update to 23.3.4.19-150300.3.39.1
erlang-wx-src - update to 23.3.4.19-150300.3.39.1
erlang-dialyzer-src - update to 23.3.4.19-150300.3.39.1
erlang-jinterface - update to 23.3.4.19-150300.3.39.1
erlang-src - update to 23.3.4.19-150300.3.39.1
erlang-doc - update to 23.3.4.19-150300.3.39.1
erlang-diameter-src - update to 23.3.4.19-150300.3.39.1
erlang-jinterface-src - update to 23.3.4.19-150300.3.39.1
erlang-observer-src - update to 23.3.4.19-150300.3.39.1
erlang-crypto - update to 25.3.2.6-19
erlang-debugger - update to 25.3.2.6-19
erlang-debuginfo - update to 25.3.2.6-19
erlang-debugsource - update to 25.3.2.6-19
erlang-dialyzer - update to 25.3.2.6-19
erlang-diameter - update to 25.3.2.6-19
erlang-edoc - update to 25.3.2.6-19
erlang-eldap - update to 25.3.2.6-19
erlang-erl_docgen - update to 25.3.2.6-19
erlang-erl_interface - update to 25.3.2.6-19
erlang-erts - update to 25.3.2.6-19
erlang-et - update to 25.3.2.6-19
erlang-eunit - update to 25.3.2.6-19
erlang-compiler - update to 25.3.2.6-19
erlang-common_test - update to 25.3.2.6-19
erlang-asn1 - update to 25.3.2.6-19
erlang - update to 25.3.2.6-19
erlang-xmerl - update to 25.3.2.6-19
erlang-wx - update to 25.3.2.6-19
erlang-tools - update to 25.3.2.6-19
erlang-tftp - update to 25.3.2.6-19
erlang-syntax_tools - update to 25.3.2.6-19
erlang-stdlib - update to 25.3.2.6-19
erlang-ssl - update to 25.3.2.6-19
erlang-ssh - update to 25.3.2.6-19
erlang-reltool - update to 25.3.2.6-19
erlang-src - update to 25.3.2.6-19
erlang-snmp - update to 25.3.2.6-19
erlang-sasl - update to 25.3.2.6-19
erlang-runtime_tools - update to 25.3.2.6-19
erlang-examples - update to 25.3.2.6-19
erlang-public_key - update to 25.3.2.6-19
erlang-parsetools - update to 25.3.2.6-19
erlang-os_mon - update to 25.3.2.6-19
erlang-odbc - update to 25.3.2.6-19
erlang-observer - update to 25.3.2.6-19
erlang-mnesia - update to 25.3.2.6-19
erlang-megaco - update to 25.3.2.6-19
erlang-kernel - update to 25.3.2.6-19
erlang-jinterface - update to 25.3.2.6-19
erlang-inets - update to 25.3.2.6-19
erlang-ftp - update to 25.3.2.6-19
erlang26-debugger-src - update to 26.2.1-150300.7.28.1
erlang26-jinterface-src - update to 26.2.1-150300.7.28.1
erlang26-epmd - update to 26.2.1-150300.7.28.1
erlang26-jinterface - update to 26.2.1-150300.7.28.1
erlang26-wx-src - update to 26.2.1-150300.7.28.1
erlang26-dialyzer-src - update to 26.2.1-150300.7.28.1
erlang26-diameter-src - update to 26.2.1-150300.7.28.1
erlang26-wx - update to 26.2.1-150300.7.28.1
erlang26-et - update to 26.2.1-150300.7.28.1
erlang26-debugger - update to 26.2.1-150300.7.28.1
erlang26-reltool-src - update to 26.2.1-150300.7.28.1
erlang26-reltool - update to 26.2.1-150300.7.28.1
erlang26-dialyzer-debuginfo - update to 26.2.1-150300.7.28.1
erlang26-epmd-debuginfo - update to 26.2.1-150300.7.28.1
erlang26-debugsource - update to 26.2.1-150300.7.28.1
erlang26-et-src - update to 26.2.1-150300.7.28.1
erlang26 - update to 26.2.1-150300.7.28.1
erlang26-dialyzer - update to 26.2.1-150300.7.28.1
erlang26-observer - update to 26.2.1-150300.7.28.1
erlang26-debuginfo - update to 26.2.1-150300.7.28.1
erlang26-src - update to 26.2.1-150300.7.28.1
erlang26-observer-src - update to 26.2.1-150300.7.28.1
erlang26-wx-debuginfo - update to 26.2.1-150300.7.28.1
erlang26-diameter - update to 26.2.1-150300.7.28.1
erlang26-doc - update to 26.2.1-150300.7.28.1
erlang27-src - update to 27.1.3-150300.7.7.1
erlang27-dialyzer-debuginfo - update to 27.1.3-150300.7.7.1
erlang27-reltool-src - update to 27.1.3-150300.7.7.1
erlang27-dialyzer - update to 27.1.3-150300.7.7.1
erlang27-debuginfo - update to 27.1.3-150300.7.7.1
erlang27-diameter-src - update to 27.1.3-150300.7.7.1
erlang27-epmd - update to 27.1.3-150300.7.7.1
erlang27 - update to 27.1.3-150300.7.7.1
erlang27-dialyzer-src - update to 27.1.3-150300.7.7.1
erlang27-debugsource - update to 27.1.3-150300.7.7.1
erlang27-reltool - update to 27.1.3-150300.7.7.1
erlang27-jinterface-src - update to 27.1.3-150300.7.7.1
erlang27-jinterface - update to 27.1.3-150300.7.7.1
erlang27-epmd-debuginfo - update to 27.1.3-150300.7.7.1
erlang27-diameter - update to 27.1.3-150300.7.7.1
erlang (Ubuntu package) - addressed in versions 1:16.b.3-dfsg-1ubuntu2.2+esm2, 1:18.3-dfsg-1ubuntu3.1+esm3, 1:20.2.2+dfsg-1ubuntu2+esm3, 1:22.2.7+dfsg-1ubuntu0.5+esm2, 1:24.2.1+dfsg-1ubuntu0.7, 1:25.3.2.8+dfsg-1ubuntu4.7, 1:27.3.4.6+dfsg-1ubuntu0.1
erlang (Debian package) - update to 1:27.3.4.1+dfsg-1+deb13u3

• https://github.com/erlang/otp/security/advisories/GHSA-446w-268v-9462

• Debian update for erlang
• openEuler 24.03 LTS SP4 update for erlang
• Multiple vulnerabilities in Erlang OTP
• openEuler 24.03 LTS SP3 update for erlang
• openEuler 24.03 LTS SP1 update for erlang
• SUSE update for erlang26
• SUSE update for erlang
• Ubuntu update for erlang
• SUSE update for erlang27
• Multiple vulnerabilities in IBM PowerVC