CVE-2025-11964

Published: Dec 31, 2025Modified: Dec 31, 2025

1.9

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

Exploitability: 0.5 / Impact: 1.4

Source: security@tcpdump.org (Secondary)

Description

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

https://github.com/the-tcpdump-group/libpcap/commit/7fabf607f2319a36a0bd78444247180acb838e69

Source: security@tcpdump.org

Timeline

No history available yet.