Stack Buffer Overflow in NEURON's CoreNEURON Product by NEURON Simulator

CVE-2026-123203

What is CVE-2026-123203?

The NEURON (CoreNEURON) software up to version 9.0.2 is vulnerable to a stack buffer overflow, which can be exploited by attackers. By supplying excessively long tokens in model datasets, specifically targeting files like bbcore_mech.dat, globals.dat, or files.dat, attackers are capable of corrupting stack memory. This exploitation can cause the NEURON process to crash, potentially leading to a denial of service. This vulnerability emphasizes the importance of secure coding practices and robust input validation to prevent memory corruption issues.

References