CVE-2026-50216

Medium

Description

An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZE_MAX value, causing an allocation failure and uncaught Objective-C exception that aborts the root system extension.

SeverityMedium
CVSS5.3
Exploit probability—
ProductGuardicore Platform Agent
PublishedOct 14, 2026
First seenOct 14, 2026
Weakness typeCWE-191CWE-191

How to fix

Update
  • Akamai Guardicore Platform Agent7.4 or later

Affected products

ProductAffected versionsFixed in
Akamai Guardicore Platform Agentv < 7.47.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.