CVE-2026-58058

Name of the Vulnerable Software and Affected Versions Nmap versions 7.0.0 through 7.99

Description An issue exists in the ipv6 get data primitive function (libnetutil/netutil.cc) where the IPv6 extension-header walk is not kept within the captured packet. This causes the pointer to advance past the buffer, leading the remaining-length computation to underflow to a large value. A scanned target or an on-path attacker can trigger out-of-bounds reads and a crash during raw IPv6 scans by returning a crafted IPv6 response with a truncated extension header.

Recommendations Update Nmap to a version later than 7.99.