PT-2026-86444

CVE-2026-31912

·

Published

2026-09-05

·

Updated

2026-09-25

Description by

CVSS 3.1
8.7
High
MetricsAV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
Name of the Vulnerable Software and Affected Versions libpcap (affected versions not specified)
Description The BPF interpreter fails to detect when the end of the filter program buffer is reached due to a missing return instruction, or when a jump instruction uses an offset that points outside the buffer. In specific uncommon scenarios, a crafted filter program can force the interpreter to read OS process memory within a 32GiB range around the buffer on 64-bit architectures, or across the entire address space on 32-bit architectures.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
AZL-99741
AZL-99921
ECHO-C577-82F0-747C
OESA-2026-3988
OESA-2026-3989
OESA-2026-3990
OESA-2026-3991
OESA-2026-4100
OPENSUSE-SU-2026:11744-1
OPENSUSE-SU-2026:21940-1
SUSE-SU-2026:23737-1
SUSE-SU-2026:23829-1
SUSE-SU-2026:23892-1
SUSE-SU-2026:23907-1
SUSE-SU-2026:4188-1
SUSE-SU-2026:4194-1
SUSE-SU-2026:4195-1
SUSE-SU-2026:4239-1
Found an issue in the description? Have something to add? Feel free to write us 👾