PT-2026-53317

CVE-2026-13588

Published

2026-06-29

Updated

2026-10-01

Description by

CVSS 3.1

5.6

Medium

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions seladb PcapPlusPlus version 25.05

Description A heap-based buffer overflow exists in the TLS Hello Handler component. The issue occurs within the pcpp::SSLClientHelloMessage::getHandshakeVersion() function located in the Packet++/src/SSLHandshake.cpp file. A remote attacker can trigger this by manipulating the handshakeVersion argument. This attack is characterized by high complexity and is considered difficult to exploit.

Recommendations Apply patch 98e671010bc7c87b95898c22ae289220ae92542b to version 25.05.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-122: Heap-based Buffer Overflow

Related identifiers