radvd-project radvdump up to 2.20 Route Information Option Parser print_ff stack-based overflow

Summaryinfo

A vulnerability was found in radvd-project radvdump up to 2.20 and classified as critical. The affected element is the function print_ff of the component Route Information Option Parser. Such manipulation leads to stack-based overflow. This vulnerability is listed as CVE-2026-48715. The attack must be carried out from within the local network. There is no available exploit. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in radvd-project radvdump up to 2.20 and classified as critical. Affected by this issue is the function print_ff of the component Route Information Option Parser. The manipulation with an unknown input leads to a stack-based overflow vulnerability. Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Impacted is confidentiality, integrity, and availability. CVE summarizes:

radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the `radvdump` utility shipped with radvd contains a stack buffer overflow in the Route Information option parser. When processing a crafted ICMPv6 Router Advertisement, `print_ff()` copies up to 2032 bytes from attacker-controlled packet data into a 16-byte `struct in6_addr` on the stack, overflowing by up to 2016 bytes. Note that the main `radvd` daemon is not affected by the vulnerability. Version 2.21 patches the issue.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2026-48715 since 05/22/2026. The exploitation is known to be easy. The attack needs to be initiated within the local network. No form of authentication is required for exploitation. There are known technical details, but no exploit is available.

Upgrading to version 2.21 eliminates this vulnerability. Applying the patch 068bde13e3fd6a5fcdb6859e6a2acd293a325dc5 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-38070). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Project Management Software

Vendor

• radvd-project

Name

• radvdump

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.9
• 2.10
• 2.11
• 2.12
• 2.13
• 2.14
• 2.15
• 2.16
• 2.17
• 2.18
• 2.19
• 2.20

License

• open-source

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion