OSV-2026-1481

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2026-1481.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1481
Published
2026-11-02T00:01:59Z
Modified
2026-11-04T14:45:07Z
Summary
Heap-buffer-overflow in ndpi_search_l2tp
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=580370355

Crash type: Heap-buffer-overflow READ 2
Crash state:
ndpi_search_l2tp
check_ndpi_detection_func
ndpi_detection_process_packet
References

Affected packages

OSS-Fuzz / ndpi

Package

Name
ndpi
Purl
pkg:generic/ndpi

Affected ranges

Type
GIT
Repo
https://github.com/ntop/nDPI.git
Events
Introduced
b17e3ae7769f49abf40738c52b1931270181de92
Fixed
0c81498aa16332e75dda8eeb63a6f45f8fc2be09
Fixed
7393261e8819b5db69f1773014de5bbb4eb32fa1

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"0b5f522d45d5a2c9a9c27e8a487cd249b165ee72:7393261e8819b5db69f1773014de5bbb4eb32fa1"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ndpi/OSV-2026-1481.yaml"