CVE-2026-57226

Suricata (versions prior to 7.0.17 and 8.0.6 ) is vulnerable to an integer-related heap buffer overflow during HTTP SWF decompression. The flaw exists in src/util-file-decompression.c, where the software may use a configured decompress-depth for memory allocation instead of limiting the allocatio...