CVE-2026-57226

A flaw was found in Suricata, a network Intrusion Detection System IDS. When the non-default SWF Small Web Format decompression feature is enabled with an unsafe decompression depth, a remote attacker can send a specially crafted SWF response. This can trigger a heap buffer overflow during HTTP S...

CVE-2026-57226 Suricata swf: heap buffer overflow in SWF decompression depth handling

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...

SUSE CVE-2025-64332

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to crash can occur if SWF decompression is enabled. This issue has been patched in version...

DEBIAN-CVE-2025-64332

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to crash can occur if SWF decompression is enabled. This issue has been patched in version...

CVE-2025-64332

Suricata versions before 7.0.13 and 8.0.2 are affected by a stack overflow when SWF decompression is enabled, which can cause the engine to crash. The issue has been patched in 7.0.13 and 8.0.2. Affected products: Suricata (IDS/IPS/NSM) by OISF. Root cause: stack overflow during SWF decompression...

CVE-2025-64332 Suricata is vulnerable to a stack overflow on larger compressed data

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to crash can occur if SWF decompression is enabled. This issue has been patched in version...

EUVD-2025-199774

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to crash can occur if SWF decompression is enabled. This issue has been patched in version...