OSV-2025-1049

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/pcapplusplus/OSV-2025-1049.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-1049
Published
2025-12-31T00:18:06.669541Z
Modified
2025-12-31T00:18:06.670109Z
Summary
Heap-buffer-overflow in unsigned char* std::__1::vector<unsigned char, std::__1::allocator<unsigned char
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=472222304

Crash type: Heap-buffer-overflow READ 1
Crash state:
unsigned char* std::__1::vector<unsigned char, std::__1::allocator<unsigned char
pcpp::TLSECPointFormatExtension::getECPointFormatList
pcpp::SSLClientHelloMessage::generateTLSFingerprint
References

Affected packages

OSS-Fuzz / pcapplusplus

Package

Name
pcapplusplus
Purl
pkg:generic/pcapplusplus

Affected ranges

Type
GIT
Repo
https://github.com/seladb/PcapPlusPlus
Events
Introduced
813f15b87f5e76a62d64360f8cbdf449c21316e4
Fixed
33b9be160d5a85aac4963c771c28336eb90af5ca

Affected versions

v24.*
v24.09
v25.*
v25.05

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"08d661c4385a9e1e1bea68afc88ccad60718f638:33b9be160d5a85aac4963c771c28336eb90af5ca"
introduced_range 
"3227ad11ec457c3dad062db548432d2a1c837d50:0c95dfb3557644acc6a10060e48cfae1a61fc2f0"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/pcapplusplus/OSV-2025-1049.yaml"