Threats tagged 'ghsa-vcxv-jm58-q462'

P-Net versions prior to 1.0.4 contain a vulnerability where the record data length of an IODWrite request to a non-user record index is not properly checked against the size of the record block header. This can cause an underflow in length calculation, leading to fixed-size reads that may read beyond the session buffer. Exploitation requires an established Application Relationship and adjacent network access. The vulnerability has a low severity score.