Threats tagged 'ghsa-vmq4-4rhp-6cqg'

P-Net versions before 1.0.3 contain a vulnerability where the application alarm callback receives a data length derived from a variable part length field without verifying it against the actual frame length. This can cause the callback to process an excessively large length value, leading to out-of-bounds reads if the application copies that many bytes. Exploitation requires an established Application Relationship and adjacent network access. Applications that do not use the alarm data are not affected.