CVE-2026-0799

A flaw was found in libpcap. The Berkeley Packet Filter (BPF) interpreter in libpcap does not properly validate register indexes in BPF instructions. A local attacker could craft a malicious filter program to trigger an out-of-bounds read and write vulnerability. This could allow the attacker to read and write arbitrary operating system process memory, potentially leading to information disclosure or arbitrary code execution.

This is an Important vulnerability in libpcap where a flaw in the BPF interpreter's register index validation can lead to out-of-bounds memory access. Exploitation requires a local attacker to provide a specially crafted BPF filter program to an application utilizing libpcap, which is considered an uncommon use case. This could result in arbitrary read and write operations within the OS process memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.