PT-2026-86441 · Tcpdump+2 · Libpcap
CVE-2026-18238
·
Published
2026-09-05
·
Updated
2026-09-10
CVSS v3.1
5.0
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N |
The rpcap client code that processes a RPCAP MSG PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.
Exploit
Fix
Buffer Over-read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Libpcap