low
advisory
VRPN: Out-of-bounds stack write (CVE-2026-123200)
VRPN through 07.36 contains an out-of-bounds stack write vulnerability that allows unauthenticated remote peers to crash the process.
CVE search metadata
CVE search record: CVE-2026-123200. Severity: high. CVSS: 7.5. KEV: no. Product: VRPN (through 07.36). Brief: VRPN: Out-of-bounds stack write (CVE-2026-123200). Brief link: https://feed.craftedsignal.io/briefs/2026-11-vrpn-stack-write/
Triage facts
Revision 1- Applicability
- VRPN (through 07.36)
- Evidence
- Not observed
- Severity
- Low
- Sources
- 1 public source
- Freshness
- Revision 1Nov 6, 05:28 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
VRPN through 07.36 contains an out-of-bounds stack write vulnerability in vrpn_Endpoint::handle_sender_message() and handle_type_message(). An unauthenticated remote peer can connect, complete the version-cookie exchange, and send a SENDER_DESCRIPTION or TYPE_DESCRIPTION message with an out-of-range or negative index to crash the process.