CVE-2026-31912 OOBR in libpcap before 1.10.7

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the BPF interpreter when processing specially crafted BPF filter programs. An attacker can cause an application crash or access sensitive information by supplying a malicious filter program. This is only exploitabl...

CVE-2026-31912

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...

CVE-2026-0799 OOBR and OOBW in libpcap before 1.10.7

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

CVE-2026-0799 OOBR and OOBW in libpcap before 1.10.7

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

EUVD-2026-72015

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

CVE-2026-0799 OOBR and OOBW in libpcap before 1.10.7

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

CVE-2026-0799

libpcap versions before 1.10.7 contain an out-of-bounds read and write (OOBR/OOBW) in its BPF interpreter. In BPF instructions that load/store a value from/to a scratch memory register, the register index is an unsigned 32-bit integer that must not exceed 15, but the interpreter does not validate...

CVE-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

CVE-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to improper validation of register indexes in the Berkeley Packet Filter interpreter. An attacker can access and modify arbitrary memory by supplying a crafted filter program. Remediation A fix was pushed into the...

PT-2026-86444

Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description The BPF interpreter fails to detect when the end of the filter program buffer is reached due to a missing return instruction, or when a jump instruction uses an offset that points outside the...

PT-2026-86445

Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description The BPF interpreter fails to verify if the immediate value is zero when processing 'div k' and 'mod k' ALU instructions. This allows a specially crafted filter program to trigger a division b...

CVE-2026-6244: Divide By Zero

libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...

CVE-2026-31912: Improper Validation of Specified Index, Position, or Offset in Input

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...

CVE-2026-31911: Reachable Assertion

libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...

CVE-2026-0799: Improper Validation of Array Index

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

PT-2026-86440

Name of the Vulnerable Software and Affected Versions libpcap versions prior to 1.10.7 Description The BPF interpreter fails to validate the register index when loading or storing values from or to a scratch memory register. While the index is an unsigned 32-bit integer that should not exceed 15,...

CVE-2026-0799: Improper Validation of Array Index

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

CVE-2026-6554: Loop with Unreachable Exit Condition

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. A crafted filter program or the 'protochain' primitive used on a crafted network packet can cause the interpret...