P2Papi Dll
Monthly
Local buffer overflow in Hangzhou Xiongmai Technology's P2P SDK affects P2PAPI.dll 1.3.3.32 on Windows, where a crafted 'input' string passed to P2PAPI_Connect overflows a buffer. Per the independent assessment, exploitation requires local access and low-level privileges (AV:L/PR:L) and is confined to availability impact (VA:L, no confidentiality or integrity loss), scoring 1.9 - a genuinely low-priority, monitor-level issue. The vendor was contacted and did not respond, and the public disclosure includes a linked GitHub gist reference that has not been verified as working exploit code; no CISA KEV entry or other confirmed active exploitation signal is present.
Local buffer overflow in Hangzhou Xiongmai Technology's P2P SDK affects P2PAPI.dll 1.3.3.32 on Windows, where a crafted 'input' string passed to P2PAPI_Connect overflows a buffer. Per the independent assessment, exploitation requires local access and low-level privileges (AV:L/PR:L) and is confined to availability impact (VA:L, no confidentiality or integrity loss), scoring 1.9 - a genuinely low-priority, monitor-level issue. The vendor was contacted and did not respond, and the public disclosure includes a linked GitHub gist reference that has not been verified as working exploit code; no CISA KEV entry or other confirmed active exploitation signal is present.