CVE-2026-57226
- Source
- https://cve.org/CVERecord?id=CVE-2026-57226
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57226.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-57226
- Aliases
-
- GHSA-p33j-r48q-3jcf
- Downstream
- Published
- 2026-09-18T20:07:31Z
- Modified
- 2026-09-20T14:24:17Z
- Severity
-
- 3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- Suricata swf: heap buffer overflow in SWF decompression depth handling
- Details
-
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in src/util-file-decompression.c instead of limiting the allocation to the Flash file's actual data requirement. A crafted SWF response can therefore trigger an integer-related heap buffer overflow and crash Suricata; the default disabled feature and default depth are not affected. This issue is fixed in versions 8.0.6 and 7.0.17.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-122", "CWE-190" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57226.json" }- References
-
- https://github.com/OISF/suricata/releases/tag/suricata-7.0.17
- https://github.com/OISF/suricata/releases/tag/suricata-8.0.6
- https://redmine.openinfosecfoundation.org/issues/8642
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57226.json
- https://github.com/OISF/suricata/security/advisories/GHSA-p33j-r48q-3jcf
- https://nvd.nist.gov/vuln/detail/CVE-2026-57226
- https://github.com/OISF/suricata/commit/82af0aeb7cec39e206a9ca96c4966425eddeaa74
- https://github.com/OISF/suricata/commit/b63224871b0f8b0b1f7b8c22d05ba8a5c5f69fbb
- https://github.com/OISF/suricata/commit/d9fae18432501674338e28bd33e35788c95d4a98
- https://github.com/OISF/suricata/pull/15704
Affected packages
Git / github.com/oisf/suricata
Affected ranges
- Type
- GIT
- Repo
- https://github.com/oisf/suricata
- Events
-
IntroducedIntroduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "introduced": "8.0.0" }, { "fixed": "8.0.6" }, { "introduced": "0" }, { "fixed": "7.0.17" } ], "source": [ "AFFECTED_FIELD", "REFERENCES" ] }
Affected versions
suricata-0.*
suricata-0.8.2
suricata-1.*
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
suricata-1.2
suricata-1.2.1
suricata-1.2beta1
suricata-1.2rc1
suricata-1.3
suricata-1.3.1
suricata-1.3beta1
suricata-1.3beta2
suricata-1.3rc1
suricata-1.4
suricata-1.4beta1
suricata-1.4beta2
suricata-1.4beta3
suricata-1.4rc1
suricata-2.*
suricata-2.0
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0.2
suricata-2.0beta1
suricata-2.0beta2
suricata-2.0rc1
suricata-2.0rc2
suricata-2.0rc3
suricata-2.1beta1
suricata-2.1beta2
suricata-2.1beta3
suricata-2.1beta4
suricata-3.*
suricata-3.0
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0RC1
suricata-3.0RC2
suricata-3.0RC3
suricata-3.1
suricata-3.1.1
suricata-3.1.2
suricata-3.1RC1
suricata-3.2
suricata-3.2.1
suricata-3.2RC1
suricata-3.2beta1
suricata-4.*
suricata-4.0.0
suricata-4.0.0-beta1
suricata-4.0.0-rc1
suricata-4.0.0-rc2
suricata-4.0.1
suricata-4.1.0
suricata-4.1.0-beta1
suricata-4.1.0-rc1
suricata-4.1.0-rc2
suricata-4.1.1
suricata-4.1.2
suricata-5.*
suricata-5.0.0
suricata-5.0.0-beta1
suricata-5.0.0-rc1
suricata-5.0.1
suricata-6.*
suricata-6.0.0
suricata-6.0.0-beta1
suricata-6.0.0-rc1
suricata-6.0.1
suricata-7.*
suricata-7.0.0
suricata-7.0.0-beta1
suricata-7.0.0-rc1
suricata-7.0.0-rc2
suricata-7.0.1
suricata-7.0.10
suricata-7.0.11
suricata-7.0.12
suricata-7.0.13
suricata-7.0.14
suricata-7.0.15
suricata-7.0.16
suricata-7.0.2
suricata-7.0.3
suricata-7.0.4
suricata-7.0.5
suricata-7.0.6
suricata-7.0.7
suricata-7.0.8
suricata-7.0.9
suricata-8.*
suricata-8.0.0
suricata-8.0.1
suricata-8.0.2
suricata-8.0.3
suricata-8.0.4
suricata-8.0.5
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57226.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "192864224979539733037586966219519213610",
"length": 2209
},
"id": "CVE-2026-57226-007d15e9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/oisf/suricata/commit/82af0aeb7cec39e206a9ca96c4966425eddeaa74",
"target": {
"file": "src/util-file-decompression.c",
"function": "FileSwfDecompression"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"275405343321062405205794929732698709963",
"144766653225240918387621820185440799630",
"60486805435350465644198612319070306078",
"9874142513738138650622108364020974595"
],
"threshold": 0.9
},
"id": "CVE-2026-57226-28280861",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/oisf/suricata/commit/82af0aeb7cec39e206a9ca96c4966425eddeaa74",
"target": {
"file": "src/util-file-decompression.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "192864224979539733037586966219519213610",
"length": 2209
},
"id": "CVE-2026-57226-3e3ee0d1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/oisf/suricata/commit/d9fae18432501674338e28bd33e35788c95d4a98",
"target": {
"file": "src/util-file-decompression.c",
"function": "FileSwfDecompression"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "192864224979539733037586966219519213610",
"length": 2209
},
"id": "CVE-2026-57226-7f929983",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/oisf/suricata/commit/b63224871b0f8b0b1f7b8c22d05ba8a5c5f69fbb",
"target": {
"file": "src/util-file-decompression.c",
"function": "FileSwfDecompression"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"275405343321062405205794929732698709963",
"144766653225240918387621820185440799630",
"17172955168613639703932889437754995674",
"270170486673652698289258520227495121975"
],
"threshold": 0.9
},
"id": "CVE-2026-57226-8f2d977e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/oisf/suricata/commit/b63224871b0f8b0b1f7b8c22d05ba8a5c5f69fbb",
"target": {
"file": "src/util-file-decompression.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"275405343321062405205794929732698709963",
"144766653225240918387621820185440799630",
"17172955168613639703932889437754995674",
"270170486673652698289258520227495121975"
],
"threshold": 0.9
},
"id": "CVE-2026-57226-d48699b2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/oisf/suricata/commit/d9fae18432501674338e28bd33e35788c95d4a98",
"target": {
"file": "src/util-file-decompression.c"
}
}
]
vanir_signatures_modified
"2026-09-20T14:24:17Z"