sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
{ "urgency": "low" }