# CVE-2026-34017: Intel Hyperscan heap-based buffer overflow

Source: https://junglewise.ai/threats/cve-2026-34017-heap-based-buffer-overflow-for-some-hyperscan-before-version-v5-4  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-10. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-34017 · Severity: info · Published 2026-11-10

Hyperscan is Intel's high-performance regular expression matching library used in pattern recognition and intrusion detection systems. A heap-based buffer overflow in Hyperscan before version 5.4.2.1 allows an unprivileged local attacker to crash applications using the library, causing a denial of service. This could disrupt security tools, network monitoring, or other services that depend on Hyperscan for pattern matching.

Technologies: [Intel Hyperscan](https://junglewise.ai/threats/technologies/hyperscan). Vendors: [Intel](https://junglewise.ai/threats/vendors/intel).

## Quick answers

**Is CVE-2026-34017 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-34017 being exploited in the wild.

**How severe is CVE-2026-34017?** Informational severity, published 10 November 2026.

**Which products and versions are affected?** Intel Hyperscan before 5.4.2.1.

**Is there a fix for CVE-2026-34017?** Yes: fixed in Hyperscan 5.4.2.1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-34017 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-34017?** Check whether you run Intel Hyperscan at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Hyperscan 5.4.2.1

## Technical details

A heap-based buffer overflow vulnerability exists in Hyperscan's Ring 3 user application layer before v5.4.2.1. An unauthenticated, unprivileged local attacker with low attack complexity can trigger denial of service via malicious input; the attack requires passive user interaction and attack-triggering preconditions. The vulnerability impacts system availability with high severity and has low integrity impact.

## Affected products

- Intel Hyperscan before 5.4.2.1

## Timeline

- 2026-11-10: disclosed

## References

- [https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html](https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01511.html)

## Related threats

- [Intel Hyperscan heap-based buffer overflow denial of service](https://junglewise.ai/threats/cve-2026-63540-heap-based-buffer-overflow-for-some-hyperscan-before-version-v5-4)
- [Intel Hyperscan out-of-bounds write denial of service](https://junglewise.ai/threats/cve-2026-40694-out-of-bounds-write-for-some-hyperscan-before-version-v5-4-2-1)
- [Intel Hyperscan out-of-bounds read in user applications](https://junglewise.ai/threats/cve-2026-40424-out-of-bounds-read-for-some-hyperscan-before-version-v5-4-2-1)
- [Intel Hyperscan multiple memory safety vulnerabilities](https://junglewise.ai/threats/cve-2026-40216-out-of-bounds-read-for-some-hyperscan-before-version-v5-4-2-1)
- [Intel Hyperscan untrusted pointer dereference DoS](https://junglewise.ai/threats/cve-2026-34489-untrusted-pointer-dereference-for-some-hyperscan-before-version)