Buffer Overflow in Hangzhou Xiongmai Technology P2PAPI.dll on Windows
CVE-2026-120226

4.8MEDIUM

Key Information:

Vendor

Hangzhou Xiongmai Technology

Status
P2papi.dll
Vendor
CVE Published:
1 November 2026

What is CVE-2026-120226?

A security vulnerability exists in Hangzhou Xiongmai Technology P2PAPI.dll version 1.3.3.32, specifically within the function P2PAPI_Connect of the P2P SDK. An improper handling of argument inputs related to string manipulation can lead to a buffer overflow. This vulnerability requires local access for exploitation, and while it has been revealed publicly, the vendor has not addressed the issue despite prior disclosure attempts.

Affected Version(s)

P2PAPI.dll 1.3.3.32

References

https://vuldb.com/vuln/429585
vdb-entrytechnical-descriptionmitigation
https://vuldb.com/vuln/429585/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-120226
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ishan Oshada
VulDB CNA Team
.