CVE-2026-115449

Name of the Vulnerable Software and Affected Versions libslirp (affected versions not specified)

Description An issue exists when handling ICMP echo requests where the reply length is not updated to match the actual data received from the host. In scenarios where the normal ICMP socket is unavailable, this length mismatch allows the host's real IP address to be leaked to the guest in the echo reply, which compromises the NAT (Network Address Translation) isolation provided by user-mode networking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.