CVE-2026-31912

A flaw was found in libpcap. The BPF interpreter in libpcap does not correctly handle crafted filter programs, leading to an out-of-bounds read. A local attacker could provide a specially crafted filter program, causing the interpreter to attempt to read memory outside of its allocated buffer. This could result in a denial of service due to an application crash.

Moderate: A flaw in the libpcap BPF interpreter allows a local attacker to trigger an out-of-bounds read by supplying a specially crafted BPF filter program. This can lead to a denial of service or information disclosure in uncommon use cases where applications process untrusted BPF filters. The impact is limited by the requirement for local access and specific application configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.