CVE-2026-38719 | THREATINT

Description

OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format (CPF) parser, specifically in CreateCommonPacketFormatStructure() in source/src/enet_encap/cpf.c. A crafted ENIP/CPF message can supply an attacker-controlled item_count value that is not consistently validated against the remaining data_length of the CPF slice

PUBLISHED Reserved 2026-04-06 | Published 2026-05-18 | Updated 2026-05-18 | Assigner mitre

References

github.com/EIPStackGroup/OpENer/issues/558 exploit

github.com/EIPStackGroup/OpENer

github.com/EIPStackGroup/OpENer/issues/558

cve.org (CVE-2026-38719)

nvd.nist.gov (CVE-2026-38719)

Download JSON