libpcap's BPF interpreter calls abort() when it encounters an instruction with an invalid opcode. The interpreter dies if a crafted filter program contains such an opcode, terminating the entire host process. This results in a denial of service to the affected application and, if the process is critical, to the system.

The vulnerability exists in the libpcap library distributed by The Tcpdump Group. Versions older than 1.10.7 are affected. Any software that links against libpcap, such as tcpdump, Wireshark, or other packet capture utilities, may be impacted when they load an attacker‑crafted filter program.

The CVSS score of 5.5 indicates moderate severity, and the EPSS is not available. The vulnerability is not listed in CISA's KEV catalog. The likely attack vector is local if the process accepts user‑supplied filter programs, or remote if an interface exposed to external input is used; a malicious filter can be injected to cause a process crash. Because the defect causes a hard kill, defenders should treat it as a potential DoS vector until a patch is applied.