Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The mUniquePacketID field is read directly from the UDP wire-format packet header without bounds checking, causing the server to allocate one CacheItem per missing packet ID gap, exhausting available host memory and propagating an uncaught std::bad_alloc exception to std::terminate().
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-66733 Unbounded Memory Allocation in Sonic 3 A.I.R. Before Commit 2492d18 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-66733
Post summary
The post references CVE‑2026‑66733, describing an unbounded memory allocation in Sonic 3 A.I.R. before commit 2492d18, with no additional exploitation or mitigation context.