An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common… (CVE-2026-75348)

CVE-2026-75348 describes an out-of-bounds read vulnerability in the EtherNet/IP TCP SendRRData Common Packet Format parser within EIPStackGroup OpENer v2.3 and master branches up to commit 76b95cf. The issue arises in the function CreateCommonPacketFormatStructure() when it parses optional socket address information items of types 0x8000 or 0x8001 without verifying that the remaining buffer contains the full fixed sockaddr structure. This improper validation can lead to reading beyond the buffer boundary, resulting in a denial of service condition triggered remotely.

The vulnerability allows a remote attacker to cause a denial of service by triggering an out-of-bounds read in the packet parser. There is no indication of confidentiality or integrity impact. The CVSS v3.1 score is 7.5 (high severity), reflecting the network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, users should monitor vendor communications for updates. No vendor advisory states that no action is required or that the issue is already mitigated.