Denial of Service Vulnerability in P-Net by RT Labs

CVE-2026-115795

What is CVE-2026-115795?

The vulnerability identified in P-Net prior to version 1.0.3 stems from inadequate validation of block headers in DCP Set and Identify requests. This flaw allows for reading beyond the bounds of the data buffer when the last block aligns with the end of the buffer. Additionally, a malformed DCP Set block can lead to length underflows, causing the block to be processed erroneously with an excessive length, resulting in potential crashes or leakage of memory content. The exploitation of this vulnerability necessitates adjacent network access.

References