EUVD-2026-117080

netrek-client-cow through 3.3.3 contains a stack-based buffer overflow vulnerability in handleSMessage in short.c that allows malicious servers to overflow a 100-byte stack buffer by sending oversized SPSMESSAGE packets. A malicious Netrek server or man-in-the-middle on the plaintext TCP connecti...

CVE-2026-121969

The software netrek-client-cow versions through 3.3.3 is vulnerable to a stack-based buffer overflow in the handleSMessage() function located in short.c. A malicious Netrek server or a man-in-the-middle attacker on a plaintext TCP connection can exploit this by sending oversized SP_S_MESSAGE pack...

EUVD-2026-117079

Netrek-client-cow through 3.3.3 contains an out-of-bounds read vulnerability in short.c handleSMessage that allows malicious servers to crash clients via an unchecked mrecpt index. Attackers controlling a Netrek server or intercepting the plaintext TCP connection can send SPSMESSAGE packets with...

CVE-2026-121968

The software Netrek-client-cow versions through 3.3.3 is vulnerable to an out-of-bounds read in the short.c file's handleSMessage() function. The root cause is an unchecked m_recpt index ; if an attacker controls a Netrek server or intercepts a plaintext TCP connection, they can send SP_S_MESSAGE...