CVE-2026-75883

Name of the Vulnerable Software and Affected Versions pppd (affected versions not specified)

Description An issue exists in the peap response() function where a response to a PEAP Request packet is formatted by copying a TLS record of up to 16384 bytes into the fixed global buffer outpacket buf. This occurs without verifying available space or implementing outgoing PEAP fragmentation. Consequently, a process connecting to a server requesting PEAP authentication can be induced to corrupt global static data following the outpacket buf array, potentially leading to incorrect behavior or a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.