Out-of-Bounds Write Vulnerability in Bitdefender Napoca Hypervisor

CVE-2026-10047

What is CVE-2026-10047?

The Bitdefender Napoca bare-metal hypervisor is susceptible to an out-of-bounds write vulnerability due to improper bounds validation in the real-mode hook handler. This vulnerability arises from the use of a guest-controlled SS:SP-derived offset, allowing for excessive memory access beyond the intended 1MB RealModeMemory buffer. When specific values are used, the computed offset can write approximately 65,519 bytes past the end of the buffer, impacting the hypervisor heap and potentially leading to unauthorized memory modifications. The product, however, is end-of-life and no longer supported by the vendor.

References