CVE-2026-127125
NULL pointer dereference when a response fragment is not acknowledged
Description
P-Net before 1.0.4 aborts the Application Relationship of an RPC session when a fragment of a response has been resent without being acknowledged, without checking that the session has an Application Relationship. A request for an existing Application Relationship that is sent on another activity than its Connect, and gets a fragmented response, is handled on a session without one. If the response is not acknowledged, a NULL pointer is dereferenced and the device crashes. A conformant IO-controller does not send such requests. The attacker must have observed the AR UUID of an established Application Relationship and requires ADJACENT network access.
INFO
Published Date :
Nov. 13, 2026, 1:25 p.m.
Last Modified :
Nov. 13, 2026, 1:25 p.m.
Remotely Exploit :
No
Source :
rt-labs
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 4.0 | MEDIUM | 4b71179a-3b92-4a9d-b9fc-af8b8ed579ee |
Solution
- Update P-Net to version 1.0.4 or newer.
- Apply vendor-specific patches for P-Net.
- Ensure only conformant IO-controllers are used.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-127125 vulnerability anywhere in the article.