CVE-2026-111732 Out-of-bounds write when parsing AR Vendor Block requests
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-111732?
CVE-2026-111732 is a critical vulnerability in RT-Labs P-Net, published on 29 Oct 2026.
Official description
P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVendorBlock request that is not part of the block definition and uses it as the number of bytes to copy into a fixed-size buffer, without comparing it with the buffer size or the block length. A crafted Connect request causes an out-of-bounds write. This can lead to a crash (denial of service) or potentially arbitrary code execution.
This option is disabled by default.
Weakness: CWE-787
Which versions are affected by CVE-2026-111732?
How do I fix CVE-2026-111732?
No fix has been published for CVE-2026-111732 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-111732 being exploited?
There is no known exploitation of CVE-2026-111732 in the wild and no public exploit code.
Sources
Also known as GHSA-h967-v272-9m8r.