CVE-2026-111732
— UNSCOREDPublished 2026-10-29 · Updated 2026-10-29
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVendorBlock request that is not part of the block definition and uses it as the number of bytes to copy into a fixed-size buffer, without comparing it with the buffer size or the block length. A crafted Connect request causes an out-of-bounds write. This can lead to a crash (denial of service) or potentially arbitrary code execution. This option is disabled by default.
Weaknesses
CWE-787
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2017-20283
- HIGHCVE-2017-20286PoC
- MEDIUMCVE-2020-37286PoC
- HIGHCVE-2021-48018PoC
- MEDIUMCVE-2021-48020PoC
- UNSCOREDCVE-2025-58773
- MEDIUMCVE-2025-60494PoC
- UNSCOREDCVE-2026-0461
Related by shared AI tags and CWE weakness class. Browse the full archive.