CVE-2025-11964CWE-787
OOBW in utf_16le_to_utf_8_truncated() in libpcap
Low · published December 31, 2025
What it is
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.
The record
Technical detail
- CVSS v3.1
- 1.9 · LOW
- Vector
- CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00122 · 1.8th percentile
- Weakness
- CWE-787 · Out-of-bounds Write
- Published
- 2025-12-31T00:58Z
EPSS history
Timeline