A vulnerability in the DPDK GSO library allows a remote or guest-supplied packet to trigger an out-of-bounds read or write due to improper validation of packet header size during software GSO processing. This flaw can cause memory corruption by underflowing the payload-size calculation when a header longer than the configured GSO segment size is copied without adequate bounds checking.