libpcap CVE-2026-6554

Unvalidated BPF scratch-register array index in libpcap's user-space BPF interpreter allows a local attacker with low pr

rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daem

Division by zero in libpcap's BPF interpreter can crash any application using the library when processing a crafted filt

Process termination via crafted BPF filter in libpcap allows a local attacker with low privileges to crash any applicati

Out-of-bounds memory reads in libpcap's userland BPF interpreter allow a local attacker who can supply a crafted filter

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory. Rated med

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source. Rated medium seve

rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. Rated medium se

Remote memory disclosure in libpcap's rpcap client allows a malicious or compromised rpcap server to cause a connected c

Remote packet capture support is disabled by default in libpcap. Rated medium severity (CVSS 4.4), this vulnerability is

Memory exhaustion in libpcap's rpcapd remote capture daemon allows an authenticated remote client to degrade or crash th