Vulnerability · Published Sep 5, 2026 · Assigned by Tcpdump
CVE-2026-0799OOBR and OOBW in libpcap before 1.10.7
High 8.7
In plain English
A high-severity out-of-bounds read in libpcap from The Tcpdump Group. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | libpcap | 14:1.10.4-7.el10_2.1 | ALSA-2026:74442 |
| AlmaLinux:8 | libpcap | 14:1.9.1-6.el8_10 | ALSA-2026:76045 |
| AlmaLinux:9 | libpcap | 14:1.10.0-4.el9_8.1 | ALSA-2026:74441 |
| AlmaLinux:10 | libpcap-devel | 14:1.10.4-7.el10_2.1 | ALSA-2026:74442 |
| AlmaLinux:8 | libpcap-devel | 14:1.9.1-6.el8_10 | ALSA-2026:76045 |
| AlmaLinux:9 | libpcap-devel | 14:1.10.0-4.el9_8.1 | ALSA-2026:74441 |
| Alpine:v3.21 | libpcap | 1.10.7-r0 | ALPINE-CVE-2026-0799 |
| Alpine:v3.22 | libpcap | 1.10.7-r0 | ALPINE-CVE-2026-0799 |
| Alpine:v3.23 | libpcap | 1.10.7-r0 | ALPINE-CVE-2026-0799 |
| Alpine:v3.24 | libpcap | 1.10.7-r0 | ALPINE-CVE-2026-0799 |
| Debian:12 | libpcap | no fix listed | DEBIAN-CVE-2026-0799 |
| Debian:13 | libpcap | no fix listed | DEBIAN-CVE-2026-0799 |
| Debian:14 | libpcap | 1.10.7-1 | DEBIAN-CVE-2026-0799 |
| Rocky Linux:10 | libpcap | 4:1.10.4-7.el10_2.1 | RLSA-2026:74442 |
| Rocky Linux:8 | libpcap | 4:1.9.1-6.el8_10 | RLSA-2026:76045 |
| Rocky Linux:9 | libpcap | 4:1.10.0-4.el9_8.1 | RLSA-2026:74441 |
| Ubuntu:22.04:LTS | libpcap | 1.10.1-4ubuntu1.22.04.2 | USN-8824-1 |
| Ubuntu:22.04:LTS | libpcap | 1.10.1-4ubuntu1.22.04.2 | UBUNTU-CVE-2026-0799 |
| Ubuntu:24.04:LTS | libpcap | 1.10.4-4.1ubuntu3.1 | USN-8824-1 |
| Ubuntu:24.04:LTS | libpcap | 1.10.4-4.1ubuntu3.1 | UBUNTU-CVE-2026-0799 |
| Ubuntu:26.04:LTS | libpcap | 1.10.6-1ubuntu1.1 | UBUNTU-CVE-2026-0799 |
| Ubuntu:26.04:LTS | libpcap | 1.10.6-1ubuntu1.1 | USN-8824-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The Tcpdump Group | libpcap | 0 – before 1.10.7 |
Weakness: CWE-129, CWE-125, CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H