CVE-2026-120226

medium

Description

A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by this issue is the function P2PAPI_Connect of the component P2P SDK. Such manipulation of the argument input as part of String leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

https://vuldb.com/vuln/429585/cti

https://vuldb.com/vuln/429585

https://vuldb.com/submit/1013929

https://vuldb.com/cve/CVE-2026-120226

https://gist.github.com/Ishanoshada/a47d24d77dd03f34c7f324491b59edac

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-114837

Details

Source: Mitre, NVD

Published: 2026-11-01

Updated: 2026-11-02

Risk Information

CVSS v2

Base Score: 1.7

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:P

Severity: Low

CVSS v3

Base Score: 3.3

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Severity: Low

CVSS v4

Base Score: 4.8

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Severity: Medium

EPSS

EPSS: 0.00124