PT-2025-54266 · Libpcap · Libpcap

Aniruddhan Murali + 3 · Published 2025-12-31 · Updated 2026-01-03 · CVE-2025-11964

Positive Technologies (AI Summary)

CVSS v3.1

1.9

Low

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions libpcap (affected versions not specified)

Description On Windows operating systems, a buffer overflow can occur when libpcap converts a Windows error message to UTF-8 if the message contains characters requiring 4 bytes in UTF-8 representation. The function utf 16le to utf 8 truncated() may write data beyond the allocated buffer size in such cases.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-11964

Affected Products

Libpcap

References · 6

• https://github.com/the-tcpdump-group/libpcap/commit/7fabf607f2319a36a0bd78444247180acb838e69 · Patch
• https://osv.dev/vulnerability/CVE-2025-11964 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11964 · Security Note
• https://t.me/CVEtracker/41022 · Telegram Post
• https://t.me/msrcreports/2873 · Telegram Post
• https://twitter.com/CVEnew/status/2006332227874169194 · Twitter Post