The vulnerability CVE-2026-13587 affects seladb PcapPlusPlus 25.05 specifically in the parse_by_block_type function of the light_pcapng.c file, part of the LightPcapNg Parser component. Manipulating the captured_packet_length argument can cause a heap-based buffer overflow. The vulnerability can be exploited remotely without privileges or user interaction, but the attack complexity is high and exploitability is difficult. Although the exploit has been publicly disclosed, there is no confirmed official fix or patch available at this time.

Successful exploitation of this vulnerability could lead to a heap-based buffer overflow, potentially allowing an attacker to cause a denial of service or execute arbitrary code remotely. However, the high attack complexity and difficulty reduce the likelihood of exploitation. The vulnerability does not require privileges or user interaction to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when processing untrusted packets with PcapPlusPlus 25.05. No vendor advisory or patch links are currently available.