CVE-2026-13587

LOW

seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow

Title source: cna
STIX 2.1

Description

A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. Performing a manipulation of the argument captured_packet_length results in heap-based buffer overflow. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been made public and could be used.

References (7)

Core 7
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-374590 | seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow
https://vuldb.com/vuln/374590
Signature, Permissions Required signature permissions-required
VDB-374590 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/374590/cti
Third Party Advisory third-party-advisory
CVE-2026-13587 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-13587
Third Party Advisory third-party-advisory
Submit #844479 | PcapPlusPlus v25.05 Heap-based Buffer Overflow
https://vuldb.com/submit/844479

Scores

CVSS v3 3.7
EPSS 0.0042
EPSS Percentile 34.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-119 CWE-122
Status published
Products (1)
seladb/PcapPlusPlus 25.05
Published Jun 29, 2026
Tracked Since Jun 29, 2026