Log in Start free

Vulnerability · Published Jun 19, 2026 · Assigned by GitHub_M

CVE-2026-48715radvdump's Route Information Option Parser has a Stack Buffer Overflow

High 7.7

In plain English

A high-severity stack buffer overflow in radvdump from radvd-project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)7.7High
Exploit odds (30 days)0.3%top 73.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the `radvdump` utility shipped with radvd contains a stack buffer overflow in the Route Information option parser. When processing a crafted ICMPv6 Router Advertisement, `print_ff()` copies up to 2032 bytes from attacker-controlled packet data into a 16-byte `struct in6_addr` on the stack, overflowing by up to 2016 bytes. Note that the main `radvd` daemon is not affected by the vulnerability. Version 2.21 patches the issue.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.24radvd2.21-r0ALPINE-CVE-2026-48715
Debian:12radvdno fix listedDEBIAN-CVE-2026-48715
Debian:13radvdno fix listedDEBIAN-CVE-2026-48715
Debian:14radvdno fix listedDEBIAN-CVE-2026-48715
Ubuntu:22.04:LTSradvdno fix listedUBUNTU-CVE-2026-48715
Ubuntu:24.04:LTSradvdno fix listedUBUNTU-CVE-2026-48715
Ubuntu:25.10radvdno fix listedUBUNTU-CVE-2026-48715
Ubuntu:26.04:LTSradvdno fix listedUBUNTU-CVE-2026-48715
Ubuntu:26.10radvdno fix listedUBUNTU-CVE-2026-48715

Affected products (as reported)

VendorProductVersions
radvd-project radvdump < 2.21

Weakness: CWE-121 · Vector: CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References