Description
A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. Performing a manipulation of the argument captured_packet_length results in heap-based buffer overflow. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been made public and could be used.
Published: 2026-06-29
Score: 6.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A heap‑based buffer overflow exists in the parse_by_block_type function of the LightPcapNg Parser component of PcapPlusPlus 25.05. By manipulating the captured_packet_length argument, an attacker can overflow a heap buffer, potentially compromising memory integrity or causing a program crash. The attack is described as having high complexity and difficult exploitability, yet a public exploit is available.

Affected Systems

This vulnerability affects the seladb PcapPlusPlus library, specifically version 25.05. No other versions or vendor products are listed as impacted.

Risk and Exploitability

The CVSS score is 6.3, indicating a medium severity level. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is remote, requiring the ability to supply manipulated packet data to the parser. The high complexity and difficult exploitability do not eliminate the risk, as a public exploit exists and could be used by adversaries with sufficient resources.

Generated by OpenCVE AI on June 29, 2026 at 17:50 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to the latest release of PcapPlusPlus (e.g., 25.06 or newer) to apply the fix for the heap‑overflow in LightPcapNg Parser.
  • If an upgrade is not immediately possible, restrict the parser’s use to trusted data sources, isolate it in a sandboxed environment, and enforce strict bounds checking on captured_packet_length before processing.
  • Monitor network traffic and application logs for abnormal patterns that may indicate attempts to exploit the heap overflow.

Generated by OpenCVE AI on June 29, 2026 at 17:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 29 Jun 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 29 Jun 2026 16:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. Performing a manipulation of the argument captured_packet_length results in heap-based buffer overflow. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been made public and could be used.
Title seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow
First Time appeared Seladb
Seladb pcapplusplus
Weaknesses CWE-119
CWE-122
CPEs cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:*
Vendors & Products Seladb
Seladb pcapplusplus
References
Metrics cvssV2_0

{'score': 2.6, 'vector': 'AV:N/AC:H/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 3.7, 'vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 3.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.3, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Seladb Pcapplusplus
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-06-29T17:41:45.157Z

Reserved: 2026-06-29T04:25:24.076Z

Link: CVE-2026-13587

cve-icon Vulnrichment

Updated: 2026-06-29T17:41:40.482Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-01T10:04:15Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-122

    Heap-based Buffer Overflow