Buffer Overflow Vulnerability in P-Net by RT Labs

CVE-2026-127122

What is CVE-2026-127122?

P-Net versions before 1.0.4 exhibit a buffer overflow vulnerability when handling MCR request blocks within Connect requests. The application fails to limit the number of request blocks in accordance with the defined capacity for multicast communication relations. As a result, this flaw allows attackers with adjacent network access to write data past the end of allocated memory arrays, which can adversely affect the integrity and stability of the application. Notably, installations with PNET_OPTION_MC_CR disabled are not vulnerable.

References