PT-2026-79002

CVE-2026-76989

Published

2026-08-20

Updated

2026-08-20

Description by

CVSS 4.0

5.5

Medium

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

Name of the Vulnerable Software and Affected Versions liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892

Description A remote attack can trigger an out-of-bounds read within the TCP Encapsulation Receive Path component, specifically affecting a function in the source/src/enet encap/encap.cc file. An out-of-bounds read occurs when a program reads data past the end of the intended buffer, potentially exposing sensitive information from memory.

Recommendations Deploy the patch identified as e8e9dba09bf56962807d3504b783ccdb6287f3e4 for liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892.

Exploitability

Exploit

Fix

Impacts

Researchers

Carnegie

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers