CVE-2026-54579

mport , the MidnightBSD Package Manager, contained a vulnerability in the ping() function within libmport/ping.c prior to version 2.7.8 . The function accepted ICMP replies without validating icmp_id or icmp_seq and parsed the reply using a fixed IP-header offset instead of the actual ip_hl field...