PT-2026-53319

CVE-2026-13590

Published

2026-06-29

Updated

2026-10-01

Description by

CVSS 3.1

5.6

Medium

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions seladb PcapPlusPlus version 25.05

Description A heap-based buffer overflow exists in the Modbus Protocol Handler component within the Packet++/header/ModbusLayer.h library. The issue occurs when the pcpp::ModbusLayer::getLength() function processes a manipulated length argument. This flaw allows for remote attacks, although they are characterized by high complexity and difficult exploitability.

Recommendations Apply patch 4c90c3e3418a2b09dc82b7ca5775e9c1e22fe454 to version 25.05.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-122: Heap-based Buffer Overflow

Related identifiers