Threats Tagged 'cve-2026-48690'

FastNetMon Community Edition up to version 1.2.9 has an integer overflow vulnerability in its packet capture buffer allocation logic. The vulnerability arises because the calculation of the buffer size uses 32-bit unsigned integer arithmetic without overflow checks, leading to a smaller-than-expected buffer allocation when a large number of packets is specified. This causes heap corruption when subsequent writes exceed the allocated buffer. The issue is linked to the ban_details_records_count configuration parameter, which is parsed without overflow validation. The CVSS score is 7.1, indicating high severity, with impacts on confidentiality and integrity but no direct availability impact. No patch or official remediation is currently documented, and no known exploits are reported in the wild.