Ndpi: Heap-buffer-overflow
Affects ndpiSource GCVE Database
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in da372c59cc0a3d83e500742953d96e7d15c01491
Data as of 27 Oct 2026, 00:33 UTC
What to do
Upgrade ndpi to da372c59cc0a3d83e500742953d96e7d15c01491.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzndpipkg:generic/ndpiOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch addressing this vulnerability is available in the commit da372c59cc0a3d83e500742953d96e7d15c01491. Users of ndpi should update to this fixed version to remediate the issue.
Description
A heap-buffer-overflow vulnerability was identified in the ndpi project within the function ___interceptor_strncpy, as reported by OSS-Fuzz. This flaw can lead to out-of-bounds writes on the heap during string operations. The issue has been fixed in a specific commit identified by the hash da372c59cc0a3d83e500742953d96e7d15c01491.