PatchTheCVECVE-2026-111735: P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind()
CVE-2026-111735 is a high-severity flaw (CVSS 7.1) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data frame while the consumer is in the FRUN or RUN state, the offset of the APDU status was computed as the frame length minus 4 using 16-bit arithmetic, without checking that the frame is long enough. A crafted short frame makes the offset wrap around, so the function reads outside the receive buffer. This can cause a crash (denial of servic
Why this priority
- High severity
No fix is published yet: follow the downgrade or mitigation steps.
Last updated 2026-10-29 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Timeline
- Published CVE record published
- Updated Record last modified
Advisories and coverage
Research and news
- VulDB Recent Entries: CVE-2026-111735 | RT-Labs P-Net up to 1.0.2 pf_cpm_c_data_ind integer underflow 2026-10-29
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-111735?
No fixed release is listed yet. Watch the vendor advisory and apply any mitigation shown on this page.
Is CVE-2026-111735 being exploited?
CVE-2026-111735 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-111735 affect?
CVE-2026-111735 affects affected software. Severity is high (CVSS 7.1). P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data frame while the consumer is in the FRUN or RUN state, the offset of the APDU status was computed as the frame length minus 4 using
How urgent is CVE-2026-111735?
Priority 25/100. High severity