Search: CVE-2026-18238

CVE-2026-18238 is a medium severity vulnerability in the libpcap library used by The Tcpdump Group. The rpcap client code improperly validates headers in RPCAP_MSG_PACKET messages from the server. This flaw allows a malicious server to cause the client to treat up to 20 bytes of memory beyond the buffer as part of the captured packet, potentially exposing sensitive memory contents.