VRPN up to and including version 07.36 contains a stack buffer overflow that is triggered by an out‑of‑bounds length index in SENDER_DESCRIPTION or TYPE_DESCRIPTION messages. The vulnerability allows an unauthenticated remote peer to supply a negative or out‑of‑range index during a normal communication exchange, causing a corrupted stack write that can lead to a crash on the server. The CVE description does not specify that this leads to arbitrary code execution; therefore that effect is not confirmed.

The affected product is VRPN, versions 07.36 and earlier. Any deployment running those releases is susceptible unless a later, patched release is used.

The CVSS score of 8.7 indicates a high severity vulnerability, and the lack of a KEV listing does not preclude exploitation. Exploitation requires an unauthenticated connection to a VRPN server; the attacker can complete the usual version‑cookie exchange and then send specifically crafted SENDER_DESCRIPTION or TYPE_DESCRIPTION messages. Without defensive coding in the receive routine, the stack corruption can lead to a denial of service. The EPSS score is not provided, so the precise exploitation probability is unknown, but the high CVSS combined with the attack simplicity suggests that the risk to exposed systems is significant.