CVE-2026-16529

Name of the Vulnerable Software and Affected Versions PCP (affected versions not specified)

Description A signed integer overflow occurs in the pmGetPDU() function during PDU processing or SASL negotiation. An attacker can exploit this by sending crafted network packets, which permanently blinds the affected daemon and leads to a total denial of service (DoS) for subsequent packet reads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.