Logo
vulnerabilityCVE-2025-11964
Name
CVE-2025-11964
Source
NVD ( link)Debian ( link)
Description
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
libpcap
Patched

Vulnerability Ratings#


1.9
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.10.6
Not Affected
buildroot
master
1.10.6
Not Affected
openwrt
master
1.10.6-r1
Not Affected
openwrt
openwrt-25.12
1.10.6-r1
Not Affected
yocto
master
1.10.6
Not Affected
yocto
scarthgap
1.10.4
Patched

Resolved with patches#


libpcap (yocto:kirkstone)

#
Title
Author
Resolve
1
Fix a copy-and-pasteo in utf_16le_to_utf_8_truncated().
Guy Harris <gharris@sonic.net>
CVE-2025-11964

libpcap (yocto:scarthgap)

#
Title
Author
Resolve
1
Fix a copy-and-pasteo in utf_16le_to_utf_8_truncated().
Guy Harris <gharris@sonic.net>
CVE-2025-11964