CVE-2026-13590

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-13590

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-13590.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-13590

Published

2026-06-29T16:45:11.826Z

Modified

2026-07-15T01:49:14.334289388Z

Severity

2.9 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow

Details

A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the component Modbus Protocol Handler. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult. The exploit has been released to the public and may be used for attacks. The patch is identified as 4c90c3e3418a2b09dc82b7ca5775e9c1e22fe454. Applying a patch is advised to resolve this issue.

Database specific

{
    "cwe_ids": [
        "CWE-119",
        "CWE-122"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/13xxx/CVE-2026-13590.json",
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/seladb/pcapplusplus

Affected ranges

Type

GIT

Repo

https://github.com/seladb/pcapplusplus

Events

Introduced

a49a79e0b67b402ad75ffa96c1795def36df75c8

Fixed

4c90c3e3418a2b09dc82b7ca5775e9c1e22fe454

Database specific

{
    "extracted_events": [
        {
            "introduced": "25.05"
        },
        {
            "last_affected": "25.05"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

25.*

25.05

v25.*

v25.05

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-13590.json"