Buffer Overflow Vulnerability in P-Net Product Line by RT-Labs

CVE-2026-124758

What is CVE-2026-124758?

The P-Net product line before version 1.0.4 is susceptible to a buffer overflow vulnerability. The flaw arises when the record data length from an IODWrite request sent to a non-user record index is not adequately verified against the size of the accompanying record block header. Consequently, when the 32-bit length is adjusted by removing the header size, it may underflow, causing record handlers to process a size of approximately 65530 bytes. This glitch allows fixed-size reads of the I&M and PDPort handlers to access memory beyond the designated session buffer, leading to potential data loss as the write results are neglected. Attackers must either maintain an established Application Relationship or transmit data within the context of one, requiring adjacent network access for exploitation.

References