What’s Vulnerable › Products
open-telemetry opentelemetry-ebpf-instrumentation vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your open-telemetry opentelemetry-ebpf-instrumentation version is affected
Latest open-telemetry opentelemetry-ebpf-instrumentation vulnerabilities
- CVE-2026-45686 — OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI (CVSS 7.5)
- CVE-2026-45685 — OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages (CVSS 7.5)
- CVE-2026-45684 — OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers (CVSS 5.3)
- CVE-2026-45683 — OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure (CVSS 3.8)
- CVE-2026-45682 — OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals (CVSS 5.5)
- CVE-2026-45681 — OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size (CVSS 5.9)
- CVE-2026-45680 — OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU (CVSS 7.5)
- CVE-2026-45679 — OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages (CVSS 6.5)
- CVE-2026-45678 — OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads (CVSS 7.5)
- CVE-2026-45676 — OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent (CVSS 5.5)