{"schema":"threatline.record/2","record":{"id":"CVE-2026-50216","aliases":[],"summary":"An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter t","details":"An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZE_MAX value, causing an allocation failure and uncaught Objective-C exception that aborts the root system extension.","categories":["Unclassified"],"product":"Guardicore Platform Agent","vendor":"Akamai","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50216","source_modified_at":"2026-10-14T15:07:57.029Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Guardicore Platform Agent","vendor":"Akamai","versions":[{"lessThan":"7.4","status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50216","source_modified_at":"2026-10-14T15:07:57.029Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Guardicore Platform Agent","ecosystem":null},"version":"7.4","basis":"first unaffected version stated in the CVE record"}],"cvss":5.3,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00325,"percentile":0.24304,"score_date":"2026-10-23"},"published_at":"2026-10-14T00:00:00.000Z","modified_at":"2026-10-14T15:07:57.029Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-50216","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-14T15:07:57.029Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-50216","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://techdocs.akamai.com/guardicore-platform-agent/changelog/"},{"source":"CVE List","url":"https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","assessed_at":"2026-10-14T15:07:39.237079Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-14T15:07:57.029Z","content_hash":"3432747c5878bfb71bbe1a8a48bf47a07244e93bb6cbbbf70625842c5e1c5794"}}