CVE-2026-48715: CWE-121: Stack-based Buffer Overflow in radvd-project radvdump
radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the `radvdump` utility shipped with radvd contains a stack buffer overflow in the Route Information option parser. When processing a crafted ICMPv6 Router Advertisement, `print_ff()` copies up to 2032 bytes from attacker-controlled packet data into a 16-byte `struct in6_addr` on the stack, overflowing by up to 2016 bytes. Note that the main `radvd` daemon is not affected by the vulnerability. Version 2.21 patches the issue.
AI Analysis
Technical Summary
CVE-2026-48715 is a stack-based buffer overflow vulnerability in the radvdump utility of the radvd-project before version 2.21. The vulnerability arises in the print_ff() function, which processes the Route Information option in ICMPv6 Router Advertisements. It copies up to 2032 bytes from attacker-controlled packet data into a 16-byte struct in6_addr buffer on the stack, causing an overflow of up to 2016 bytes. This can lead to memory corruption and potentially allow an attacker to execute arbitrary code or crash the utility. The main radvd daemon is unaffected. The issue is fixed in radvdump version 2.21.
Potential Impact
Successful exploitation of this vulnerability can result in memory corruption due to a stack buffer overflow in radvdump, potentially allowing arbitrary code execution or denial of service. The main radvd daemon is not impacted, limiting the scope to the radvdump utility only.
Mitigation Recommendations
Upgrade radvdump to version 2.21 or later, where this vulnerability is patched. Since no official patch or remediation level is explicitly stated beyond the version fix, applying this version upgrade is the recommended mitigation.
CVE-2026-48715: CWE-121: Stack-based Buffer Overflow in radvd-project radvdump
Description
radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the `radvdump` utility shipped with radvd contains a stack buffer overflow in the Route Information option parser. When processing a crafted ICMPv6 Router Advertisement, `print_ff()` copies up to 2032 bytes from attacker-controlled packet data into a 16-byte `struct in6_addr` on the stack, overflowing by up to 2016 bytes. Note that the main `radvd` daemon is not affected by the vulnerability. Version 2.21 patches the issue.
CVSS v4.0
Score 7.7high
Affected software
pkg:github/radvd-project/radvdumpRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-48715 is a stack-based buffer overflow vulnerability in the radvdump utility of the radvd-project before version 2.21. The vulnerability arises in the print_ff() function, which processes the Route Information option in ICMPv6 Router Advertisements. It copies up to 2032 bytes from attacker-controlled packet data into a 16-byte struct in6_addr buffer on the stack, causing an overflow of up to 2016 bytes. This can lead to memory corruption and potentially allow an attacker to execute arbitrary code or crash the utility. The main radvd daemon is unaffected. The issue is fixed in radvdump version 2.21.
Potential Impact
Successful exploitation of this vulnerability can result in memory corruption due to a stack buffer overflow in radvdump, potentially allowing arbitrary code execution or denial of service. The main radvd daemon is not impacted, limiting the scope to the radvdump utility only.
Mitigation Recommendations
Upgrade radvdump to version 2.21 or later, where this vulnerability is patched. Since no official patch or remediation level is explicitly stated beyond the version fix, applying this version upgrade is the recommended mitigation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-22T18:47:27.755Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a359d6df198dc38c1220393
Added to database: 06/19/2026, 19:50:05 UTC
Last enriched: 06/26/2026, 21:49:55 UTC
Last updated: 08/03/2026, 19:18:00 UTC
Views: 57
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.