An out‑of‑bounds memory access in the p2r3 Bareiron project allows an unauthenticated attacker to supply crafted packets that trigger the vulnerability, resulting in reading sensitive memory contents outside the intended buffer and causing a denial of service when the application becomes unresponsive. This weakness corresponds to CWE‑125 (Out‑of‑Bounds Read).

Affected product: p2r3 Bareiron. The vulnerability exists in commit 8e4d40; any release that incorporates this commit is impacted, with no specific version range listed.

The CVSS score is 9.1, indicating a high severity threat. EPSS is not available and the vulnerability is not listed in the KEV catalog. Exploitation does not require authentication and is likely achieved over the network by sending a specially crafted packet to the affected component. No patches or workarounds are publicly documented, so attackers could exploit this flaw on any exposed instance of the component.