CVE-2026-121969

Name of the Vulnerable Software and Affected Versions netrek-client-cow versions prior to 3.3.4

Description A stack-based buffer overflow exists in the handleSMessage() function within short.c. This issue occurs when the client processes oversized SP S MESSAGE packets, allowing a malicious server or a man-in-the-middle attacker on a plaintext TCP connection to overflow a 100-byte stack buffer. By sending overlong or unterminated message bodies, an attacker can write controlled bytes onto the stack, leading to a client crash.

Recommendations Update to a version newer than 3.3.3.