CVE-2026-71402

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client wickedd-dhcp4 rea...

PT-2026-82547

Name of the Vulnerable Software and Affected Versions wicked versions prior to 0.6.81 Description An integer underflow exists in the DHCPv4 packet capture code of the wickedd-dhcp4 client. The function ni capture inspect udp header in src/capture.c fails to verify that the IP total length field i...

PT-2026-82548

Name of the Vulnerable Software and Affected Versions wicked versions prior to 0.6.81 Description An out-of-bounds read exists in the DHCPv4 packet capture code. The function ni capture inspect udp header in src/capture.c incorrectly reports the IP total length as the payload length instead of th...