Buffer Overflow Vulnerability in P-Net by RT Labs

CVE-2026-115794

What is CVE-2026-115794?

A buffer overflow vulnerability exists in P-Net versions prior to 1.0.3, where the application incorrectly processes a data length derived from a variable part length field of a received RTA alarm frame. Without adequate validation against the actual frame length, this flaw allows for a situation where a callback can receive a potentially oversized length of up to 65507 bytes. Consequently, this could lead to stack corruption if an application attempts to copy the specified number of bytes, exceeding the bounds of the allocated receive buffer. Importantly, successful exploitation requires the attacker to have established an Application Relationship and possess adjacent network access. Applications not utilizing alarm data remain unaffected by this vulnerability.

References