CVE-2026-18238
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
- EPSS probability
- 0.18%
- CWE
- CWE-1288, CWE-126
- Published
- 2026-09-05
- Last modified
- 2026-09-08
Affected products
- The Tcpdump Group libpcap
- The Tcpdump Group libpcap
- The Tcpdump Group libpcap
Weakness type
Related vulnerabilities
- CVE-2026-69793 — Windows TCP/IP Security Feature Bypass Vulnerability
- CVE-2026-18794 — OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite
- CVE-2026-73219 — CVAT: Denial of service with regards to automatic annotation
- CVE-2026-18209 — Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check
- CVE-2026-15943 — Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change
- CVE-2026-42982 — Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- CVE-2026-14781 — Keycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo email
- CVE-2026-9689 — Keycloak: org.keycloak.protocol.oidc: http parameter pollution in oidc redirect uri allows response parameter duplication - #ghi-604