CVE-2026-18238

A flaw was found in libpcap. The rpcap client code, which processes RPCAP_MSG_PACKET messages from a server, incorrectly validates its headers. A malicious server could exploit this vulnerability by sending a specially crafted message, causing the client to read up to 20 bytes of memory beyond its intended buffer. This out-of-bounds read could lead to the disclosure of sensitive information from the client's process memory.

This Moderate impact information disclosure flaw in libpcap's rpcap client allows a malicious server to read up to 20 bytes of client process memory. The vulnerability occurs when the client processes a crafted RPCAP_MSG_PACKET message, leading to an out-of-bounds read. Exploitation requires the client to connect to a controlled malicious server, limiting the attack surface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.