CVE-2026-6244: CWE-369 Divide By Zero in The Tcpdump Group libpcap

The vulnerability in libpcap's BPF interpreter arises because it fails to validate the immediate operand for the 'div #k' and 'mod #k' instructions, allowing a crafted filter program to trigger a division by zero. This flaw can cause the application using libpcap to crash or become unavailable. The affected versions are all libpcap releases before 1.10.7. The CVSS 3.1 base score is 5.5, reflecting local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact.

Exploitation of this vulnerability can cause a denial of service by crashing or halting the application that uses libpcap for packet capturing. There is no impact on confidentiality or integrity. No known exploits are reported in the wild.

A fixed version 1.10.7 or later should be applied to remediate this vulnerability. Since no patch links were provided in the input, users should consult the official Tcpdump Group or libpcap project advisories for the official fix. Until patched, avoid using untrusted or crafted BPF filter programs that could trigger the divide-by-zero condition.