| Title | PcapPlusPlus v25.05 Heap-based Buffer Overflow |
|---|
| Description | A heap-based buffer over-read vulnerability exists in PcapPlusPlus's bundled LightPcapNg parser within the parse_by_block_type function at light_pcapng.c:172. The flaw is caused by missing validation on the captured_packet_length value read directly from parsed PCAPNG file data. When processing a maliciously crafted PCAPNG file, the program calls memcpy() using the untrusted, uncontrolled length value without checking its validity against the actual allocated heap buffer size. This results in copying excessive bytes far beyond the heap buffer boundary, triggering a large out-of-bounds heap read and causing program crash. Remote attackers can exploit this vulnerability by supplying a specially crafted PCAPNG file to trigger heap memory corruption, leading to a denial-of-service (DoS) condition and potential sensitive memory information disclosure. |
|---|
| Source | ⚠️ https://github.com/seladb/PcapPlusPlus/issues/2149 |
|---|
| User | TYGLS (UID 94774) |
|---|
| Submission | 06/01/2026 05:10 (28 days ago) |
|---|
| Moderation | 06/29/2026 06:25 (28 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 374590 [seladb PcapPlusPlus 25.05 LightPcapNg Parser light_pcapng.c parse_by_block_type captured_packet_length heap-based overflow] |
|---|
| Points | 20 |
|---|