CVE-2025-51005

Published: Sep 23, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly handles memory in the checksum calculation logic at do_checksum_math_liveplay in tcpliveplay.c, leading to a possible denial of service.

Affected (1)

Products: Broadcom: Tcpreplay

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Broadcom Tcpreplay	Version 4.5.1

Related CWEs

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (2)

https://github.com/appneta/tcpreplay/issues/925

Source: cve@mitre.org

ExploitIssue TrackingVendor Advisory

https://github.com/sy460129/CVE-2025-51005

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.