Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-119600

tcpflow < 1.7.0 Out-of-Bounds Read via TCP Demultiplexer Payload Length

tcpflow before 1.7.0 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process memory by sending packets with forged IP payload lengths. Attackers can inject crafted IPv4 or IPv6 TCP packets into captured traffic or pcap files to leak adjacent memory into reconstructed flow files or crash tcpflow.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Simsong
Products
Tcpflow
CVE-2026-25061

tcpflow has TIM Element OOB Write in wifipcap

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past `tim.bitmap[251]`. The overflow is small and DoS is the likely impact; code execution is potential, but still up in the air. The affected structure is stack-allocated in `handle_beacon()` and related handlers. As of time of publication, no known patches are available.

CVSS 4.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Digitalcorpora Simsong
Products
Debian Linux Tcpflow Tcpflow