CVE-2026-31912 - OOBR in libpcap before 1.10.7
Brief
CVE ID : CVE-2026-31912
Published : Sept. 5, 2026, 7:16 p. m.
- 1 hour, 28 minutes ago
Description : libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer.
In particular uncommon use cases a crafted filter program can cause the interpreter to try reading the OS process memory in the 32GiB around the buffer on 64-bit architectures and in the entire address space on 32-bit architectures.
Severity: 5.5
- MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...