CVE-2026-50216

An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZE_MAX value, causing an allocation failure and uncaught Objective-C exception that aborts the root system extension.

CVSS 3.1

5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-25)

CWE

CWE-191

Published

2026-10-14

Modified

2026-10-16

Record from

the NVD, synced 2026-10-19

References

• https://techdocs.akamai.com/guardicore-platform-agent/changelog/
• https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4

Check your stackJSON