CVE-2026-0799 - High Severity Vulnerability
Vulnerable Library - libpcaplibpcap-1.10.5
the LIBpcap interface to various kernel packet capture mechanism
Library home page: https://github.com/salewski/libpcap.git
Found in base branches: stable/4.0, master
Vulnerable Source Files (1)
/contrib/libpcap/bpf_filter.c
Vulnerability Details
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.
Publish Date: 2026-09-05
URL: CVE-2026-0799
CVSS 3 Score Details (8.7)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Changed
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: High
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Release Date: 2026-09-05
Fix Resolution: https://github.com/the-tcpdump-group/libpcap.git - libpcap-1.10.7
Step up your Open Source Security Game with Mend here
CVE-2026-0799 - High Severity Vulnerability
the LIBpcap interface to various kernel packet capture mechanism
Library home page: https://github.com/salewski/libpcap.git
Found in base branches: stable/4.0, master
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.
Publish Date: 2026-09-05
URL: CVE-2026-0799
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Changed
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: High
- Availability Impact: High
For more information on CVSS3 Scores, click here.Type: Upgrade version
Release Date: 2026-09-05
Fix Resolution: https://github.com/the-tcpdump-group/libpcap.git - libpcap-1.10.7
Step up your Open Source Security Game with Mend here