CVE-2026-121969

The software netrek-client-cow versions through 3.3.3 is vulnerable to a stack-based buffer overflow in the handleSMessage() function located in short.c. A malicious Netrek server or a man-in-the-middle attacker on a plaintext TCP connection can exploit this by sending oversized SP_S_MESSAGE pack...