CVE-2026-63451

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.0 through 8.0.5

Description A heap buffer overflow can occur when loading a locally supplied detection rule that combines frame inspection without content and a transformed match without content. This causes the src/detect-engine-prefilter.c file to select multiple non-prefilter frame engines during signature preparation for non-prefilter inspection, leading to a system crash. This issue is triggered by loading a crafted rule, including in test mode, and cannot be exploited via network traffic alone.

Recommendations Update to version 8.0.6.