CVE-2026-66733
Received Received - Intake

Unbounded Memory Allocation in Sonic 3 A.I.R.

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulnCheck

Description
Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The mUniquePacketID field is read directly from the UDP wire-format packet header without bounds checking, causing the server to allocate one CacheItem per missing packet ID gap, exhausting available host memory and propagating an uncaught std::bad_alloc exception to std::terminate().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-66733
EUVD
EUVD-2026-53876

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sonic_3_a.i.r sonic_3_a.i.r to 26.03.28.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-789 The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an unbounded memory allocation flaw in Sonic 3 A.I.R. before commit 2492d18. It allows unauthenticated remote attackers to crash the server by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The server reads this field directly from the UDP header without bounds checking, causing it to allocate excessive memory and crash.

Impact Analysis

This vulnerability can cause denial-of-service by crashing the server process due to memory exhaustion. It requires no authentication and can be triggered remotely, making it a high-severity risk for affected systems.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66733. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart