CVE-2026-111735
— UNSCOREDPublished 2026-10-29 · Updated 2026-10-29
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data frame while the consumer is in the FRUN or RUN state, the offset of the APDU status was computed as the frame length minus 4 using 16-bit arithmetic, without checking that the frame is long enough. A crafted short frame makes the offset wrap around, so the function reads outside the receive buffer. This can cause a crash (denial of service) or disclose memory content.
Weaknesses
CWE-125, CWE-191
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- UNSCOREDCVE-2026-102714PoC
- HIGHCVE-2026-103636PoC
- UNSCOREDCVE-2026-106464PoC
- MEDIUMCVE-2026-107614
- UNSCOREDCVE-2026-107836PoC
- UNSCOREDCVE-2026-111075PoC
- MEDIUMCVE-2026-18747PoC
- CRITICALCVE-2026-49868PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.