CVE-2026-16529 — Pcp: pcp: denial of service due to signed integer overflow
A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the af…
Published: 2026-07-30 · CVSS: 7.5 · CVSS 3.1
A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7