CVE-2026-66733

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

CVE-2026-66733: Memory Allocation with Excessive Size Value

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

PT-2026-68488

Name of the Vulnerable Software and Affected Versions Sonic 3 A.I.R. versions prior to commit 2492d18 Description An unbounded memory allocation issue exists in the ReceivedPacketCache::enqueuePacket function. Unauthenticated remote attackers can crash the server process by sending a specially...