netrek-client-cow vulnerabilities
CVEs whose affected-version data names the netrek-client-cow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-121969Medium· 6.5netrek-client-cow through 3.3.3 Stack Buffer Overflow via handleSMessage
netrek-client-cow through 3.3.3 contains a stack-based buffer overflow vulnerability in handleSMessage() in short.c that allows malicious servers to overflow a 100-byte stack buffer by sending oversized SP_S_MESSAGE packets. A malicious …
▾ Sunlitquozl · netrek-client-cowEPSS 0.34%via CVEORG
CVE-2026-121968Medium· 6.5Netrek-client-cow through 3.3.3 Out-of-Bounds Read via SP_S_MESSAGE Packets
Netrek-client-cow through 3.3.3 contains an out-of-bounds read vulnerability in short.c handleSMessage() that allows malicious servers to crash clients via an unchecked m_recpt index. Attackers controlling a Netrek server or intercepting…
▾ Sunlitquozl · netrek-client-cowEPSS 0.33%via CVEORG