CVE-2026-0799

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-0799
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-0799.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-0799
Downstream
ALPINE (1)
ALSA (3)
AZL (2)
BELL (1)
CLSA (3)
DEBIAN (1)
ECHO (1)
MGASA (1)
OESA (5)
openSUSE (2)
RHSA (3)
RLSA (3)
SUSE (8)
UBUNTU (1)
Related
ALSA (3)
openSUSE (2)
SUSE (8)
Published
2026-09-05T18:48:39Z
Modified
2026-10-28T10:50:54Z
Severity
  • 8.7 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H CVSS Calculator
Summary
OOBR and OOBW in libpcap before 1.10.7
Details

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.

Database specific 
{
    "cna_assigner": "Tcpdump",
    "cwe_ids": [
        "CWE-125",
        "CWE-129",
        "CWE-787"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0799.json"
}
References

Affected packages

Git / github.com/the-tcpdump-group/libpcap

Affected ranges

Type
GIT
Repo
https://github.com/the-tcpdump-group/libpcap
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
1926f4163e4eef978c71fde28a3f6d51fff183a8
Fixed
48e8960a7108e9e828f9d7bdc7e97bdab841aec7
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "1.10.7"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "fixed": "48e8960a7108e9e828f9d7bdc7e97bdab841aec7"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

libpcap-0.*
libpcap-0.6.1
libpcap-0.7.1
libpcap-0.8-bp
libpcap-1.*
libpcap-1.10-bp
libpcap-1.10.0
libpcap-1.10.1
libpcap-1.10.2
libpcap-1.10.3
libpcap-1.10.4
libpcap-1.10.5
libpcap-1.10.6
libpcap-1.7.0-bp
libpcap-1.8.0-bp
libpcap-1.8.1
libpcap-1.9-bp
libpcap-1.9.0-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-0799.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "93496371634338935195273087524799309489",
                "76943592959768625155189410777882494755",
                "147893165603774244095237422567562512939",
                "189820924979698075619574152729715658249",
                "279432880534192196461142181033305033635",
                "183954662133259190767489492183233197373",
                "231126789456780287462037331576936745249",
                "299308225669883024026534814903705044323",
                "76000364153852106174084685411664720442",
                "66549812011853300350068554423228137207",
                "87623451611845008472217439363246227579",
                "265168526583298404141911923457073807916",
                "79467085003847351206664676536906302276"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-0799-0267fb7c",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/the-tcpdump-group/libpcap/commit/48e8960a7108e9e828f9d7bdc7e97bdab841aec7",
        "target": {
            "file": "bpf_filter.c"
        }
    }
]
vanir_signatures_modified 
"2026-10-28T10:50:54Z"