CVE-2025-11964
published 2025-12-31CVE-2025-11964: On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes…
PriorityP48low1.9CVSS 3.1
AVLACHPRHUINSUCNILAN
EPSS
0.10%
1.1th percentile
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libpcap | — | — |
| linux | linux_kernel | >= 4.17.0 < 5.10.248 | 5.10.248 |
| linux | linux_kernel | >= 5.11.0 < 5.15.198 | 5.15.198 |
| linux | linux_kernel | >= 5.16.0 < 6.1.160 | 6.1.160 |
| linux | linux_kernel | >= 6.13.0 < 6.18.3 | 6.18.3 |
| linux | linux_kernel | >= 6.2.0 < 6.6.120 | 6.6.120 |
| linux | linux_kernel | >= 6.7.0 < 6.12.64 | 6.12.64 |
| msrc | azl3_libpcap_1.10.5-1_on_azure_linux_3.0 | — | — |
| msrc | azl3_nmap_7.95-2_on_azure_linux_3.0 | — | — |
| msrc | cbl2_libpcap_1.10.1-4_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_nmap_7.93-3_on_cbl_mariner_2.0 | — | — |
| the_tcpdump_group | libpcap | >= 1.10.0 < 1.10.6 | 1.10.6 |
CVSS provenance
nvdv3.11.9LOWCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
osv5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_debian1.9LOW
vendor_msrc1.9LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libpcap: libpcap: Data corruption via out-of-bounds write on Windows
vendor_redhat·2025-12-31·CVSS 1.9
CVE-2025-11964 [LOW] CWE-787 libpcap: libpcap: Data corruption via out-of-bounds write on Windows
libpcap: libpcap: Data corruption via out-of-bounds write on Windows
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.
A flaw was found in libpcap on Windows. When libpcap converts a Windows error message containing 4-byte UTF-8 characters, the utf_16le_to_utf_8_truncated() function can write data beyond its allocated buffer. This out-of-bounds write can lead to data corruption, impacting the integrity of the system. Exploitation requires high privileges and local access, with high attack complexity.
Statement: This vulnerability is rated Low for Red Hat as the flaw in libpcap specifically affects Windows
Microsoft
OOBW in utf_16le_to_utf_8_truncated() in libpcap
vendor_msrc·2025-12-09·CVSS 1.9
CVE-2025-11964 [LOW] CWE-787 OOBW in utf_16le_to_utf_8_truncated() in libpcap
OOBW in utf_16le_to_utf_8_truncated() in libpcap
Mariner: Mariner
Tcpdump: Tcpdump
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
Debian
CVE-2025-11964: libpcap - On Windows only, if libpcap needs to convert a Windows error message to UTF-8 an...
vendor_debian·2025·CVSS 1.9
CVE-2025-11964 [LOW] CVE-2025-11964: libpcap - On Windows only, if libpcap needs to convert a Windows error message to UTF-8 an...
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
OSV
tracing: Do not register unsupported perf events
osv·2026-01-14·CVSS 5.5
CVE-2025-71125 tracing: Do not register unsupported perf events
tracing: Do not register unsupported perf events
In the Linux kernel, the following vulnerability has been resolved:
tracing: Do not register unsupported perf events
Synthetic events currently do not have a function to register perf events.
This leads to calling the tracepoint register functions with a NULL
function pointer which triggers:
------------[ cut here ]------------
WARNING: kernel/tracepoint.c:175 at tracepoint_add_func+0x357/0x370, CPU#2: perf/2272
Modules linked in: kvm_intel kvm irqbypass
CPU: 2 UID: 0 PID: 2272 Comm: perf Not tainted 6.18.0-ftest-11964-ge022764176fc-dirty #323 PREEMPTLAZY
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.17.0-debian-1.17.0-1 04/01/2014
RIP: 0010:tracepoint_add_func+0x357/0x370
Code: 28 9c e8 4c 0b f5 ff eb 0f 4c 89 f7 48 c7 c6 8
OSV
CVE-2025-11964: On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes,
osv·2026-01-02·CVSS 1.9
CVE-2025-11964 [LOW] CVE-2025-11964: On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes,
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.
GHSA
GHSA-53h7-g6w8-rxxc: On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes,
ghsa_unreviewed·2025-12-31
CVE-2025-11964 [LOW] CWE-787 GHSA-53h7-g6w8-rxxc: On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes,
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.
No detection rules found.
No public exploits indexed.
2025-12-31
Published