Libpcap's BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not validate that the immediate value is non‑zero. A crafted filter program containing a division or modulo by zero can trigger a division‑by‑zero exception, which causes the interpreter to crash or terminate. This results in a denial of service to the application using libpcap or to the system segment that handles packet capture.

All versions of the Tcpdump Group's libpcap older than 1.10.7 are affected. This library is part of packet‑capture facilities, so any application that loads libpcap and processes user‑supplied BPF filter programs can be impacted. The vulnerability remains until the library is upgraded to 1.10.7 or newer.

The CVSS score of 5.5 classifies the vulnerability as moderate severity. The EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog, indicating no known widespread exploitation. The attack vector is local or application‑level: an attacker must supply a crafted filter program to a running libpcap instance, which is feasible only where user input can be passed to a filter compiler or loader. While exploitation is possible, the limited context and lack of public exploits suggest a moderate risk, but patching remains advisable due to the potential for service interruption.