CVE-2026-111732

Versions of P-Net prior to 1.0.3 are vulnerable to an out-of-bounds write when built with the PNET_OPTION_AR_VENDOR_BLOCKS option enabled. The software fails to validate a data length field from an ARVendorBlock request against the fixed-size buffer capacity, using the provided length as the byte...