OSV-2026-301

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/pcapplusplus/OSV-2026-301.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-301
Published
2026-02-25T00:06:29.960410Z
Modified
2026-08-07T14:24:41.315094Z
Summary
Use-of-uninitialized-value in pcpp::IPv6Extension::getExtensionLen
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486705308

Crash type: Use-of-uninitialized-value
Crash state:
pcpp::IPv6Extension::getExtensionLen
pcpp::IPv6Layer::parseExtensions
pcpp::IPv6Layer::IPv6Layer
References

Affected packages

OSS-Fuzz / pcapplusplus

Package

Name
pcapplusplus
Purl
pkg:generic/pcapplusplus

Affected ranges

Type
GIT
Repo
https://github.com/seladb/PcapPlusPlus
Events
Introduced
813f15b87f5e76a62d64360f8cbdf449c21316e4
Fixed
8ac4366c4184f096973ef4a0ca084559935828d0

Affected versions

v24.*
v24.09
v25.*
v25.05
v26.*
v26.07

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"80c73281201f6c7354e9605a35bb3831506f5151:8ac4366c4184f096973ef4a0ca084559935828d0"
introduced_range 
"3227ad11ec457c3dad062db548432d2a1c837d50:0c95dfb3557644acc6a10060e48cfae1a61fc2f0"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/pcapplusplus/OSV-2026-301.yaml"