PT-2026-25796 · P2R3 · Bareiron

Published 2026-03-16 · Updated 2026-04-27 · CVE-2025-69809

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions p2r3 Bareiron commit 8e4d40

Description A write-what-where condition exists in p2r3 Bareiron commit 8e4d40. This allows unauthenticated attackers to write arbitrary values to memory, potentially leading to arbitrary code execution through a crafted packet. A write-what-where condition occurs when the program writes data to a memory location determined by another value controlled by the attacker. This can allow an attacker to overwrite critical data or code, leading to control of the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-123

Related Identifiers

CVE-2025-69809

Affected Products

Bareiron

References · 12

• 🔥 https://github.com/vmpr0be/bareiron-vr/blob/main/CVE-2025-69809.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-69809 · Security Note
• https://github.com/p2r3/bareiron · Note
• https://twitter.com/TheHackerWire/status/2033646556679921678 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rznolx/top_10_trending_cves_21032026 · Reddit Post
• https://twitter.com/vmpr0be/status/2033928831740862677 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rwznzd/top_10_trending_cves_18032026 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1rys5uh/top_10_trending_cves_20032026 · Reddit Post
• https://t.me/cveNotify/161137 · Telegram Post
• https://twitter.com/CVEnew/status/2033755384301621551 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2033794542164382139 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rxwcmn/top_10_trending_cves_19032026 · Reddit Post