This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-31912 | BDVDB-2026-368481 Detail

The Tcpdump Grouplibpcap

Description#

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading the OS process memory in the 32GiB around the buffer on 64-bit architectures and in the entire address space on 32-bit architectures.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: local.

Weaknesses#

  • CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input
  • CWE-823 Use of Out-of-range Pointer Offset
  • CWE-125 Out-of-bounds Read

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.