CVE-2026-120226
lowA security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows.
A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by this issue is the function P2PAPI_Connect of the component P2P SDK. Such manipulation of the argument input as part of String leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://gist.github.com/Ishanoshada/a47d24d77dd03f34c7f324491b59edac cna@vuldb.com
- https://vuldb.com/cve/CVE-2026-120226 cna@vuldb.com
- https://vuldb.com/submit/1013929 cna@vuldb.com
- https://vuldb.com/vuln/429585 cna@vuldb.com
- https://vuldb.com/vuln/429585/cti cna@vuldb.com