Skip to main content
VulnerabilityPublished Updated

pcpp::IPv6Extension::getExtensionLen · Pcapplusplus: Use-of-uninitialized-value

Affects pcapplusplusSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Patch
Available – fixed in 8ac4366c4184f096973ef4a0ca084559935828d0

Data as of 8 Aug 2026, 14:53 UTC

What to do

Upgrade pcapplusplus to 8ac4366c4184f096973ef4a0ca084559935828d0.

Affected software

ProductAffectedFixed in
OSS-Fuzzpcappluspluspkg:generic/pcapplusplusOther threatsAffected
  • >=813f15b87f5e76a62d64360f8cbdf449c21316e4 <8ac4366c4184f096973ef4a0ca084559935828d0
  • =v24.09
  • =v25.05
  • =v26.07
Fixed in
  • 8ac4366c4184f096973ef4a0ca084559935828d0

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch is available for this vulnerability. Users should update to a fixed version of Pcapplusplus beyond the affected versions 24.09, 25.05, and 26.07. No additional mitigation steps are indicated by the vendor or OSS-Fuzz report.

Description

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=486705308 ``` Crash type: Use-of-uninitialized-value Crash state: pcpp::IPv6Extension::getExtensionLen pcpp::IPv6Layer::parseExtensions pcpp::IPv6Layer::IPv6Layer ```

References

Community reviews

Loading reviews…