Back to overview

CVE-2026-13587

LOW Exploitation: PoC
3.7
CVSS 3.1
Description
A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. Performing a manipulation of the argument captured_packet_length results in heap-based buffer overflow. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been made public and could be used.

Metadata

CVE ID
CVE-2026-13587
State
PUBLISHED
Assigner
VulDB
Reserved
2026-06-29 04:25 UTC
Published
2026-06-29 16:00 UTC
Last updated
2026-06-29 17:41 UTC
Primary CWE
CWE-122
Heap-based Buffer Overflow
Vendor / Product
seladb / PcapPlusPlus
Sources
cve.org  ·  NVD

Severity & Metrics

3.7 LOW CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
SSVC — CISA Coordinator
Exploitation
PoC
Automatable
no
Tech. Impact
partial
Affected products (1)
VendorProductPlatformVersions
seladb PcapPlusPlus — 25.05
Weakness (CWE)
CWESourceDescription
CWE-119 cna Memory Corruption
CWE-122 cna Heap-based Buffer Overflow
CVSS scores (4)
ScoreSeverityVersionSourceVector
6.3 MEDIUM 4.0 cna CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
3.7 LOW 3.1 cna CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
3.7 LOW 3.0 cna CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
2.6 N/D 2.0 cna AV:N/AC:H/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR
References (7)
Back to overview