PT-2026-132313
CVE-2026-111732
·
Published
2026-10-29
·
Updated
2026-10-29
Description by
CVSS 4.0
9.3
CriticalMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
P-Net versions prior to 1.0.3
Description
An out-of-bounds write occurs when the software is built with
PNET OPTION AR VENDOR BLOCKS enabled. The issue arises during the parsing of an ARVendorBlock request, where a data length field not included in the block definition is used as the number of bytes to copy into a fixed-size buffer without verifying it against the buffer size or block length. A crafted Connect request can trigger this flaw, potentially leading to a system crash (denial of service) or arbitrary code execution.Recommendations
Update to version 1.0.3.
Disable the
PNET OPTION AR VENDOR BLOCKS option to mitigate the risk. Found an issue in the description? Have something to add? Feel free to write us 👾