# CVE-2026-18313

## Summary

- **CVE ID:** CVE-2026-18313
- **Severity:** MEDIUM
- **CVSS Score:** 4.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
- **CWE:** CWE-401
- **Published:** Sep 5, 2026
- **Last Modified:** Sep 8, 2026

## Description

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use.  A malicious client can cause the server to leak memory substantially faster.

## Affected Products

- The Tcpdump Group — libpcap (1.9.x)
- The Tcpdump Group — libpcap (1.10.x)

## References

- [CNA](https://github.com/the-tcpdump-group/libpcap/commit/f9775af1a0ec76db60c7213241e6b48f1be10ac7)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.21%
- **EPSS Percentile:** 11.5

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._