Summary
This release contains bug fixes since version 1.0.2, mainly related to
the parsing and validation of received network packets and RPC
requests. We recommend upgrading.
Please see the cybersecurity advisory at
https://rt-labs.com/wp-content/uploads/2026/10/RRTL-261019-01.pdf
for more information.
Issues fixed
| ID | Summary | Component | Severity |
|---|---|---|---|
| 2389 | (CVE-2025-32396): oob write ExpectedSubmoduleBlockReq | P-Net | normal |
| 2390 | (CVE-2025-32405): oob write PF_BT_AR_VENDOR_BLOCK_REQ | P-Net | major |
| 2391 | (CVE-2025-32404): oob write pf_get_ar_prm_server_request | P-Net | major |
| 2392 | (CVE-2025-32403): oob write pf_get_mcr_request | P-Net | major |
| 2393 | (CVE-2025-32401): oob write pf_ppm_finish_buffer | P-Net | major |
| 2394 | (CVE-2025-32399): p-net hang | P-Net | major |
| 2395 | (CVE-2025-32402): oob write IODataObjectFrameOffset | P-Net | major |
| 2396 | (CVE-2025-32400): oob write ppm-init-buf | P-Net | major |
| 2397 | (CVE-2025-32398): NULL ptr deref RPCPtRequest | P-Net | major |
| 2398 | (CVE-2025-32397): oob write IRInfoBlock | P-Net | major |
| 2401 | P-Net fuzz testing | P-Net | normal |