CVE-2026-65819 | BDVDB-2026-356359 Detail

Description#

gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through DecodingLayerParser or DecodeFromBytes to trigger an unrecovered panic and remotely deny service. A patch commit is available at 210f25f.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-07Record published in the CVE List.
2. Version 22026-08-11Most recent update recorded in the CVE List.