The vulnerability in FastNetMon Community Edition (≤1.2.9) arises from insufficient validation in the decode_mp_reach_ipv6() function within src/bgp_protocol.cpp. Specifically, the function casts raw pointers to structured types without verifying data length, uses an attacker-controlled length_of_next_hop field to determine memcpy size, and calculates prefix_length from attacker-controlled offsets without bounds checks. These unchecked operations lead to out-of-bounds reads, violating memory safety and potentially exposing sensitive data or causing application instability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) reflects a network attack vector with low complexity, no privileges or user interaction required, and high confidentiality impact without integrity or availability impact.

Successful exploitation can lead to unauthorized disclosure of memory contents due to out-of-bounds reads, impacting confidentiality. There is no indication of integrity or availability impact. The vulnerability can be triggered remotely without authentication or user interaction, increasing its risk profile. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting exposure of vulnerable FastNetMon instances to untrusted networks to reduce risk. Monitor vendor channels for updates and apply patches promptly once available.