Heap-based Buffer Overflow in RT-Labs P-Net Affects IO Device Stability
CVE-2025-32396

7.5HIGH

Key Information:

Vendor

Rt-labs

Status
P-net
Vendor
CVE Published:
7 May 2025

What is CVE-2025-32396?

A heap-based buffer overflow exists in RT-Labs P-Net version 1.0.1 and earlier. This vulnerability poses a risk to the stability of IO devices utilizing the affected library. Attackers can exploit the flaw by sending carefully crafted RPC packets, potentially leading to device crashes and disrupting service. It is crucial for users and administrators to apply appropriate security measures to protect against such exploitation.

Affected Version(s)

P-Net 0 <= 1.0.1

References

https://www.nozominetworks.com/labs/vulnerability-advisor...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luca Borzacchiello of Nozomi Networks.
.