A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by this issue is the function P2PAPI_Connect of the component P2P SDK. Such manipulation of the argument input as part of String leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://vuldb.com/vuln/429585 vdb-entry, technical-description, mitigation
- https://gist.github.com/Ishanoshada/a47d24d77dd03f34c7f324491b59edac mitigation
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.8 · hangzhou xiongmai technologyNVD modified 2026-11-01 11:45
Affected (CPE criteria) 1
cpe:2.3:a:hangzhou_xiongmai_technology:p2papi.dll:*:*:*:*:*:*:*:*
References 5
- https://vuldb.com/vuln/429585 vdb-entry, technical-description, mitigation
- https://vuldb.com/vuln/429585/cti signature, permissions-required
- https://vuldb.com/cve/CVE-2026-120226 third-party-advisory
- https://vuldb.com/submit/1013929 third-party-advisory
- https://gist.github.com/Ishanoshada/a47d24d77dd03f34c7f324491b59edac mitigation