Integer Underflow Vulnerability in P-Net by RT-Labs

CVE-2026-111735

What is CVE-2026-111735?

P-Net prior to version 1.0.3 is susceptible to an integer underflow vulnerability in the pf_cpm_c_data_ind() function. This issue arises when processing a cyclic data frame while the consumer is in the FRUN or RUN state. The computation of the APDU status offset utilizes 16-bit arithmetic, resulting in the potential for the offset to incorrectly wrap around if the frame length is insufficient. This miscalculation can lead to the function reading beyond the intended receive buffer, potentially resulting in application crashes or unauthorized exposure of memory contents.

References