CVE-2025-11964

A flaw was found in libpcap on Windows. When libpcap converts a Windows error message containing 4-byte UTF-8 characters, the utf_16le_to_utf_8_truncated() function can write data beyond its allocated buffer. This out-of-bounds write can lead to data corruption, impacting the integrity of the system. Exploitation requires high privileges and local access, with high attack complexity.

This vulnerability is rated Low for Red Hat as the flaw in libpcap specifically affects Windows operating systems. Red Hat products, including Red Hat Enterprise Linux and OpenShift Container Platform, are not affected as the vulnerable code is not present in their respective libpcap packages.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.